Watermarking-arxiv-daily

KO | EN

gitlite — search

#javascript #python #hacktoberfest #react #ai #typescript #llm #go #golang #android #machine-learning #rust #deep-learning #linux

Watermarking-arxiv-daily

★ 14 Open GitHub ↗

Automatically Update Watermarking Papers Daily using Github Actions (Update Every 12th hours)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# 🛡️ Watermarking arXiv Daily

Automatically updated arXiv papers about digital watermarking, generative AI provenance, LLM watermarking, and model ownership.

> Updated automatically from arXiv. **Introduction** shows the first figure found in each paper's arXiv HTML page.

**Last updated:** 2026-08-14 12:15 CST &nbsp; · &nbsp; **Indexed:** 323 unique papers

## Categories

- [Image and Video Watermarking](#image-and-video-watermarking) · 106 papers
- [Generative AI Watermarking](#generative-ai-watermarking) · 39 papers
- [Text and LLM Watermarking](#text-and-llm-watermarking) · 107 papers
- [Model Ownership and Fingerprinting](#model-ownership-and-fingerprinting) · 103 papers

## Today's additions · 2026-08-14

Papers first indexed during today's update, grouped by category.

<details>
<summary><a href="#image-and-video-watermarking">Image and Video Watermarking</a> · 0 new papers</summary>

- No new papers today.

</details>

<details>
<summary><a href="#generative-ai-watermarking">Generative AI Watermarking</a> · 0 new papers</summary>

- No new papers today.

</details>

<details>
<summary><a href="#text-and-llm-watermarking">Text and LLM Watermarking</a> · 1 new papers</summary>

- [Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks](https://arxiv.org/abs/2608.12713) — 2026-08-13

</details>

<details>
<summary><a href="#model-ownership-and-fingerprinting">Model Ownership and Fingerprinting</a> · 0 new papers</summary>

- No new papers today.

</details>

<details>
<summary>Search scope and keywords</summary>

- **[Image and Video Watermarking](#image-and-video-watermarking):** `image watermarking`, `video watermarking`, `digital image watermark`, `multimedia watermarking`, `invisible watermark`
- **[Generative AI Watermarking](#generative-ai-watermarking):** `generative AI watermarking`, `AI-generated content watermarking`, `diffusion model watermarking`, `diffusion watermark`, `latent watermarking`
- **[Text and LLM Watermarking](#text-and-llm-watermarking):** `large language model watermarking`, `language model watermarking`, `LLM watermarking`, `text watermarking`, `watermarked text`
- **[Model Ownership and Fingerprinting](#model-ownership-and-fingerprinting):** `neural network watermarking`, `model watermarking`, `model fingerprinting`, `neural network fingerprinting`, `model ownership verification`

</details>

## Image and Video Watermarking

**106 papers · newest first**

| **Title & Authors** | **Venue/Year** | **Introduction** | **Links** |
|:---|:---:|:---|:---:|
| **MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation** Jie Cao, Qi Li, Zelin Zhang et al. | the 35th USENIX Security Symposium (USENIX Security 2026) **2026** | <img width="400" alt="MarkNull: Model-Agnostic Watermark Removal in AI-Generated Images via On-Manifold Latent Manipulation" src="https://arxiv.org/html/2608.10166/2608.10166v1/x1.png"> | [Paper](https://arxiv.org/abs/2608.10166) [PDF](https://arxiv.org/pdf/2608.10166) `2608.10166` |
| **Signpost Watermarking: Joint Optimization for Visual Watermark Coexistence** Shruti Agarwal, Vishal Asnani, John Collomosse | arXiv · cs.CV **2026** | <img width="400" alt="Signpost Watermarking: Joint Optimization for Visual Watermark Coexistence" src="https://arxiv.org/html/2608.10091/2608.10091v1/figure/CoexistWatermark_Architecture.png"> | [Paper](https://arxiv.org/abs/2608.10091) [PDF](https://arxiv.org/pdf/2608.10091) `2608.10091` |
| **SpreadMark: Robust Image Watermarking via Spread-Spectrum Embedding** Wei Song, Yuxin Cao, Zhenchang Xing et al. | arXiv · cs.CR **2026** | <img width="400" alt="SpreadMark: Robust Image Watermarking via Spread-Spectrum Embedding" src="https://arxiv.org/html/2608.03165/2608.03165v1/figures/spreadmark_overview.png"> | [Paper](https://arxiv.org/abs/2608.03165) [PDF](https://arxiv.org/pdf/2608.03165) `2608.03165` |
| **SPFM-Net: Semantic-Prior-Guided Frequency-Constrained Mamba for Invisible Watermark Attack** Chunpeng Wang, Yanan Shi, Zhiqiu Xia et al. | arXiv · cs.CV **2026** | <img width="400" alt="SPFM-Net: Semantic-Prior-Guided Frequency-Constrained Mamba for Invisible Watermark Attack" src="https://arxiv.org/html/2607.27811/2607.27811v1/Figures/figure1.jpg"> | [Paper](https://arxiv.org/abs/2607.27811) [PDF](https://arxiv.org/pdf/2607.27811) `2607.27811` |
| **FDDWAN: A Frequency-Decoupled Diffusion Network for Watermarking Attack** Chunpeng Wang, Yuxin Li, Xiaoyu Wang et al. | arXiv · cs.CV **2026** | <img width="400" alt="FDDWAN: A Frequency-Decoupled Diffusion Network for Watermarking Attack" src="https://arxiv.org/html/2607.27800/2607.27800v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.27800) [PDF](https://arxiv.org/pdf/2607.27800) `2607.27800` |
| **CASIAL: Geometric Distortion Robust Image Watermarking** Yupeng Qiu, Han Fang, Ee-Chien Chang | arXiv · cs.CV **2026** | <img width="400" alt="CASIAL: Geometric Distortion Robust Image Watermarking" src="https://arxiv.org/html/2607.26729/2607.26729v1/Fig/rador3.png"> | [Paper](https://arxiv.org/abs/2607.26729) [PDF](https://arxiv.org/pdf/2607.26729) `2607.26729` |
| **Beyond AI-Generated Labels: Watermarking, Co-Creation, and Conflation of AI-Generation with Disinformation** Federico Germani, Giovanni Spitale | arXiv · cs.CR **2026** | — | [Paper](https://arxiv.org/abs/2607.13082) [PDF](https://arxiv.org/pdf/2607.13082) `2607.13082` |
| **FlowMark: Mask-Guided Video Watermarking** Vishal Asnani, Shruti Agarwal, John Collomosse | arXiv · cs.CV **2026** | <img width="400" alt="FlowMark: Mask-Guided Video Watermarking" src="https://arxiv.org/html/2607.05261v1/teaser_new_ver_2.jpg"> | [Paper](https://arxiv.org/abs/2607.05261) [PDF](https://arxiv.org/pdf/2607.05261) `2607.05261` |
| **"Training robust watermarking model may hurt authentication!'' Exploring and Mitigating the Identity Leakage in Robust Watermarking** Xinyu Zhang, Ziping Dong, Qingyu Liu et al. | arXiv · cs.CR **2026** | <img width="400" alt="&quot;Training robust watermarking model may hurt authentication!&#x27;&#x27; Exploring and Mitigating the Identity Leakage in Robust Watermarking" src="https://arxiv.org/html/2605.09646v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.09646) [PDF](https://arxiv.org/pdf/2605.09646) `2605.09646` |
| **CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint** Jiewei Lai, Lan Zhang, Chen Tang et al. | arXiv · cs.CV **2026** | <img width="400" alt="CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint" src="https://arxiv.org/html/2605.01479v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.01479) [PDF](https://arxiv.org/pdf/2605.01479) `2605.01479` |
| **Breaking Watermarks in the Frequency Domain: A Modulated Diffusion Attack Framework** Chunpeng Wang, Binyan Qu, Xiaoyu Wang et al. | arXiv · cs.CV **2026** | <img width="400" alt="Breaking Watermarks in the Frequency Domain: A Modulated Diffusion Attack Framework" src="https://arxiv.org/html/2604.22220v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.22220) [PDF](https://arxiv.org/pdf/2604.22220) `2604.22220` |
| **ADD for Multi-Bit Image Watermarking** An Luo, Jie Ding | arXiv · stat.ML **2026** | <img width="400" alt="ADD for Multi-Bit Image Watermarking" src="https://arxiv.org/html/2604.11491v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.11491) [PDF](https://arxiv.org/pdf/2604.11491) `2604.11491` |
| **UniMark: Unified Adaptive Multi-bit Watermarking for Autoregressive Image Generators** Yigit Yilmaz, Elena Petrova, Mehmet Kaya et al. | arXiv · cs.CV **2026** | <img width="400" alt="UniMark: Unified Adaptive Multi-bit Watermarking for Autoregressive Image Generators" src="https://arxiv.org/html/2604.11843v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.11843) [PDF](https://arxiv.org/pdf/2604.11843) `2604.11843` |
| **ResGuard: Enhancing Robustness Against Known Original Attacks in Deep Watermarking** Hanyi Wang, Han Fang, Yupeng Qiu et al. | arXiv · cs.CV **2026** | <img width="400" alt="ResGuard: Enhancing Robustness Against Known Original Attacks in Deep Watermarking" src="https://arxiv.org/html/2604.03693v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.03693) [PDF](https://arxiv.org/pdf/2604.03693) `2604.03693` |
| **Understanding Semantic Perturbations on In-Processing Generative Image Watermarks** Anirudh Nakra, Min Wu | arXiv · cs.CV **2026** | <img width="400" alt="Understanding Semantic Perturbations on In-Processing Generative Image Watermarks" src="https://arxiv.org/html/2603.27513v1/x1.png"> | [Paper](https://arxiv.org/abs/2603.27513) [PDF](https://arxiv.org/pdf/2603.27513) `2603.27513` |
| **SAiW: Source-Attributable Invisible Watermarking for Proactive Deepfake Defense** Bibek Das, Chandranath Adak, Soumi Chattopadhyay et al. | arXiv · cs.AI **2026** | <img width="400" alt="SAiW: Source-Attributable Invisible Watermarking for Proactive Deepfake Defense" src="https://arxiv.org/html/2603.23178v1/Image/E_network.jpg"> | [Paper](https://arxiv.org/abs/2603.23178) [PDF](https://arxiv.org/pdf/2603.23178) `2603.23178` |
| **Editing Away the Evidence: Diffusion-Based Image Manipulation and the Failure Modes of Robust Watermarking** Qian Qi, Jiangyun Tang, Jim Lee et al. | arXiv · eess.IV **2026** | — | [Paper](https://arxiv.org/abs/2603.12949) [PDF](https://arxiv.org/pdf/2603.12949) `2603.12949` |
| **SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarking** Zheng Gao, Yifan Yang, Xiaoyu Li et al. | arXiv · cs.CV **2026** | <img width="400" alt="SLICE: Semantic Latent Injection via Compartmentalized Embedding for Image Watermarking" src="https://arxiv.org/html/2603.12749v1/x1.png"> | [Paper](https://arxiv.org/abs/2603.12749) [PDF](https://arxiv.org/pdf/2603.12749) `2603.12749` |
| **Attribution as Retrieval: Model-Agnostic AI-Generated Image Attribution** Hongsong Wang, Renxi Cheng, Chaolei Han et al. | CVPR 2026 **2026** | <img width="400" alt="Attribution as Retrieval: Model-Agnostic AI-Generated Image Attribution" src="https://arxiv.org/html/2603.10583v1/x1.png"> | [Paper](https://arxiv.org/abs/2603.10583) [PDF](https://arxiv.org/pdf/2603.10583) `2603.10583` |
| **The Orthogonal Vulnerabilities of Generative AI Watermarks: A Comparative Empirical Benchmark of Spatial and Latent Provenance** Jesse Yu, Nicholas Wei | arXiv · cs.CR **2026** | — | [Paper](https://arxiv.org/abs/2603.10323) [PDF](https://arxiv.org/pdf/2603.10323) `2603.10323` |
| **ShapeMark: Robust and Diversity-Preserving Watermarking for Diffusion Models** Yuqi Qian, Yun Cao, Haocheng Fu et al. | In Proceedings of the 34th ACM International Conference on Multimedia (MM 2026) **2026** | <img width="400" alt="ShapeMark: Robust and Diversity-Preserving Watermarking for Diffusion Models" src="https://arxiv.org/html/2603.09454v1/x1.png"> | [Paper](https://arxiv.org/abs/2603.09454) [PDF](https://arxiv.org/pdf/2603.09454) `2603.09454` |
| **AWPD: Frequency Shield Network for Agnostic Watermark Presence Detection** Xiang Ao, Yilin Du, Zidan Wang et al. | arXiv · cs.CV **2026** | <img width="400" alt="AWPD: Frequency Shield Network for Agnostic Watermark Presence Detection" src="https://arxiv.org/html/2603.06723v3/x1.png"> | [Paper](https://arxiv.org/abs/2603.06723) [PDF](https://arxiv.org/pdf/2603.06723) `2603.06723` |
| **When Denoising Becomes Unsigning: Theoretical and Empirical Analysis of Watermark Fragility Under Diffusion-Based Image Editing** Fai Gu, Qiyu Tang, Te Wen et al. | arXiv · cs.CR **2026** | — | [Paper](https://arxiv.org/abs/2603.04696) [PDF](https://arxiv.org/pdf/2603.04696) `2603.04696` |
| **SIGMark: Scalable In-Generation Watermark with Blind Extraction for Video Diffusion** Xinjie Zhu, Zijing Zhao, Hui Jin et al. | ICLR 2026 **2026** | <img width="400" alt="SIGMark: Scalable In-Generation Watermark with Blind Extraction for Video Diffusion" src="https://arxiv.org/html/2603.02882v1/x1.png"> | [Paper](https://arxiv.org/abs/2603.02882) [PDF](https://arxiv.org/pdf/2603.02882) `2603.02882` |
| **Authenticated Contradictions from Desynchronized Provenance and Watermarking** Alexander Nemecek, Hengzhi He, Guang Cheng et al. | CVPR 2026 Workshop Authenticity & Provenance in the Age of AI (APAI) **2026** | <img width="400" alt="Authenticated Contradictions from Desynchronized Provenance and Watermarking" src="https://arxiv.org/html/2603.02378v2/imgs/comparison.png"> | [Paper](https://arxiv.org/abs/2603.02378) [PDF](https://arxiv.org/pdf/2603.02378) `2603.02378` |
| **Hide&Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstruction** Huajie Chen, Tianqing Zhu, Hailin Yang et al. | arXiv · cs.CR **2026** | <img width="400" alt="Hide&amp;Seek: Remove Image Watermarks with Negligible Cost via Pixel-wise Reconstruction" src="https://arxiv.org/html/2603.01067v1/figures/hs_overview.drawio.jpg"> | [Paper](https://arxiv.org/abs/2603.01067) [PDF](https://arxiv.org/pdf/2603.01067) `2603.01067` |
| **SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Models** Yang Yang, Xinze Zou, Zehua Ma et al. | arXiv · cs.CV **2026** | <img width="400" alt="SKeDA: A Generative Watermarking Framework for Text-to-video Diffusion Models" src="https://arxiv.org/html/2603.00194v1/x1.png"> | [Paper](https://arxiv.org/abs/2603.00194) [PDF](https://arxiv.org/pdf/2603.00194) `2603.00194` |
| **Attention to Neural Plagiarism: Diffusion Models Can Plagiarize Your Copyrighted Images!** Zihang Zou, Boqing Gong, Liqiang Wang | ICCV 2025 **2025** | <img width="400" alt="Attention to Neural Plagiarism: Diffusion Models Can Plagiarize Your Copyrighted Images!" src="https://arxiv.org/html/2603.00150v1/images/teaser_with_notes.png"> | [Paper](https://arxiv.org/abs/2603.00150) [PDF](https://arxiv.org/pdf/2603.00150) `2603.00150` |
| **Vanishing Watermarks: Diffusion-Based Image Editing Undermines Robust Invisible Watermarking** Fan Guo, Jiyu Kang, Qi Ming et al. | arXiv · cs.CR **2026** | — | [Paper](https://arxiv.org/abs/2602.20680) [PDF](https://arxiv.org/pdf/2602.20680) `2602.20680` |
| **Decoupling Defense Strategies for Robust Image Watermarking** Jiahui Chen, Zehang Deng, Zeyu Zhang et al. | arXiv · cs.CV **2026** | <img width="400" alt="Decoupling Defense Strategies for Robust Image Watermarking" src="https://arxiv.org/html/2602.20053/x1.png"> | [Paper](https://arxiv.org/abs/2602.20053) [PDF](https://arxiv.org/pdf/2602.20053) `2602.20053` |
| **MarkSweep: A No-box Removal Attack on AI-Generated Image Watermarking via Noise Intensification and Frequency-aware Denoising** Jie Cao, Zelin Zhang, Qi Li et al. | arXiv · cs.CR **2026** | <img width="400" alt="MarkSweep: A No-box Removal Attack on AI-Generated Image Watermarking via Noise Intensification and Frequency-aware Denoising" src="https://arxiv.org/html/2602.15364/x1.png"> | [Paper](https://arxiv.org/abs/2602.15364) [PDF](https://arxiv.org/pdf/2602.15364) `2602.15364` |
| **WMVLM: Evaluating Diffusion Model Image Watermarking via Vision-Language Models** Zijin Yang, Yu Sun, Kejiang Chen et al. | arXiv · cs.CV **2026** | <img width="400" alt="WMVLM: Evaluating Diffusion Model Image Watermarking via Vision-Language Models" src="https://arxiv.org/html/2601.21610/x1.png"> | [Paper](https://arxiv.org/abs/2601.21610) [PDF](https://arxiv.org/pdf/2601.21610) `2601.21610` |
| **DeMark: A Query-Free Black-Box Attack on Deepfake Watermarking Defenses** Wei Song, Zhenchang Xing, Liming Zhu et al. | arXiv · cs.CR **2026** | <img width="400" alt="DeMark: A Query-Free Black-Box Attack on Deepfake Watermarking Defenses" src="https://arxiv.org/html/2601.16473/ComMark/images/SC/mbrs_distributions.png"> | [Paper](https://arxiv.org/abs/2601.16473) [PDF](https://arxiv.org/pdf/2601.16473) `2601.16473` |
| **NiMark: A Non-intrusive Watermarking Framework against Screen-shooting Attacks** Yufeng Wu, Xin Liao, Baowei Wang et al. | arXiv · eess.IV **2026** | <img width="400" alt="NiMark: A Non-intrusive Watermarking Framework against Screen-shooting Attacks" src="https://arxiv.org/html/2601.11978/x1.png"> | [Paper](https://arxiv.org/abs/2601.11978) [PDF](https://arxiv.org/pdf/2601.11978) `2601.11978` |
| **RAVEN: Erasing Invisible Watermarks via Novel View Synthesis** Fahad Shamshad, Nils Lukas, Karthik Nandakumar | arXiv · cs.CV **2026** | <img width="400" alt="RAVEN: Erasing Invisible Watermarks via Novel View Synthesis" src="https://arxiv.org/html/2601.08832/x1.png"> | [Paper](https://arxiv.org/abs/2601.08832) [PDF](https://arxiv.org/pdf/2601.08832) `2601.08832` |
| **MT-Mark: Rethinking Image Watermarking via Mutual-Teacher Collaboration with Adaptive Feature Modulation** Fei Ge, Ying Huang, Jie Liu et al. | arXiv · cs.CV **2025** | <img width="400" alt="MT-Mark: Rethinking Image Watermarking via Mutual-Teacher Collaboration with Adaptive Feature Modulation" src="https://arxiv.org/html/2512.19438/x1.png"> | [Paper](https://arxiv.org/abs/2512.19438) [PDF](https://arxiv.org/pdf/2512.19438) `2512.19438` |
| **WaTeRFlow: Watermark Temporal Robustness via Flow Consistency** Utae Jeong, Sumin In, Hyunju Ryu et al. | arXiv · cs.CV **2025** | <img width="400" alt="WaTeRFlow: Watermark Temporal Robustness via Flow Consistency" src="https://arxiv.org/html/2512.19048/x1.png"> | [Paper](https://arxiv.org/abs/2512.19048) [PDF](https://arxiv.org/pdf/2512.19048) `2512.19048` |
| **Pixel Seal: Adversarial-only training for invisible image and video watermarking** Tomáš Souček, Pierre Fernandez, Hady Elsahar et al. | arXiv · cs.CV **2025** | <img width="400" alt="Pixel Seal: Adversarial-only training for invisible image and video watermarking" src="https://arxiv.org/html/2512.16874/x1.png"> | [Paper](https://arxiv.org/abs/2512.16874) [PDF](https://arxiv.org/pdf/2512.16874) `2512.16874` |
| **Where is the Watermark? Interpretable Watermark Detection at the Block Level** Maria Bulychev, Neil G. Marchant, Benjamin I. P. Rubinstein | arXiv · cs.CV **2025** | <img width="400" alt="Where is the Watermark? Interpretable Watermark Detection at the Block Level" src="https://arxiv.org/html/2512.14994/x1.png"> | [Paper](https://arxiv.org/abs/2512.14994) [PDF](https://arxiv.org/pdf/2512.14994) `2512.14994` |
| **Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models** Malte Hellmeier | arXiv · cs.CR **2025** | <img width="400" alt="Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models" src="https://arxiv.org/html/2512.13325/x1.png"> | [Paper](https://arxiv.org/abs/2512.13325) [PDF](https://arxiv.org/pdf/2512.13325) `2512.13325` |
| **SPDMark: Selective Parameter Displacement for Robust Video Watermarking** Samar Fares, Nurbek Tastan, Karthik Nandakumar | arXiv · cs.CV **2025** | <img width="400" alt="SPDMark: Selective Parameter Displacement for Robust Video Watermarking" src="https://arxiv.org/html/2512.12090v2/x1.png"> | [Paper](https://arxiv.org/abs/2512.12090) [PDF](https://arxiv.org/pdf/2512.12090) `2512.12090` |
| **SimuFreeMark: A Noise-Simulation-Free Robust Watermarking Against Image Editing** Yichao Tang, Mingyang Li, Di Miao et al. | arXiv · cs.CV **2025** | <img width="400" alt="SimuFreeMark: A Noise-Simulation-Free Robust Watermarking Against Image Editing" src="https://arxiv.org/html/2511.11295/figures/END.png"> | [Paper](https://arxiv.org/abs/2511.11295) [PDF](https://arxiv.org/pdf/2511.11295) `2511.11295` |
| **On the Information-Theoretic Fragility of Robust Watermarking under Diffusion Editing** Yunyi Ni, Ziyu Yang, Ze Niu et al. | arXiv · cs.CR **2025** | — | [Paper](https://arxiv.org/abs/2511.10933) [PDF](https://arxiv.org/pdf/2511.10933) `2511.10933` |
| **Robustness and Imperceptibility Analysis of Hybrid Spatial-Frequency Domain Image Watermarking** Rizal Khoirul Anam | arXiv · cs.MM **2025** | <img width="400" alt="Robustness and Imperceptibility Analysis of Hybrid Spatial-Frequency Domain Image Watermarking" src="https://arxiv.org/html/2511.10245/lena.png"> | [Paper](https://arxiv.org/abs/2511.10245) [PDF](https://arxiv.org/pdf/2511.10245) `2511.10245` |
| **Diffusion-Based Image Editing: An Unforeseen Adversary to Robust Invisible Watermarks** Wenkai Fu, Finn Carter, Yue Wang et al. | arXiv · cs.CR **2025** | — | [Paper](https://arxiv.org/abs/2511.05598) [PDF](https://arxiv.org/pdf/2511.05598) `2511.05598` |
| **T2SMark: Balancing Robustness and Diversity in Noise-as-Watermark for Diffusion Models** Jindong Yang, Han Fang, Weiming Zhang et al. | arXiv · cs.CV **2025** | <img width="400" alt="T2SMark: Balancing Robustness and Diversity in Noise-as-Watermark for Diffusion Models" src="https://arxiv.org/html/2510.22366/x1.png"> | [Paper](https://arxiv.org/abs/2510.22366) [PDF](https://arxiv.org/pdf/2510.22366) `2510.22366` |
| **Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models** Tomáš Souček, Sylvestre-Alvise Rebuffi, Pierre Fernandez et al. | arXiv · cs.LG **2025** | <img width="400" alt="Transferable Black-Box One-Shot Forging of Watermarks via Image Preference Models" src="https://arxiv.org/html/2510.20468/x1.png"> | [Paper](https://arxiv.org/abs/2510.20468) [PDF](https://arxiv.org/pdf/2510.20468) `2510.20468` |
| **SynthID-Image: Image watermarking at internet scale** Sven Gowal, Rudy Bunel, Florian Stimberg et al. | arXiv · cs.CR **2025** | <img width="400" alt="SynthID-Image: Image watermarking at internet scale" src="https://arxiv.org/html/2510.09263/x1.png"> | [Paper](https://arxiv.org/abs/2510.09263) [PDF](https://arxiv.org/pdf/2510.09263) `2510.09263` |
| **SpecGuard: Spectral Projection-based Advanced Invisible Watermarking** Inzamamul Alam, Md Tanvir Islam, Khan Muhammad et al. | arXiv · cs.CV **2025** | <img width="400" alt="SpecGuard: Spectral Projection-based Advanced Invisible Watermarking" src="https://arxiv.org/html/2510.07302/sec/Figs/Visual-04.jpg"> | [Paper](https://arxiv.org/abs/2510.07302) [PDF](https://arxiv.org/pdf/2510.07302) `2510.07302` |
| **We Can Hide More Bits: The Unused Watermarking Capacity in Theory and in Practice** Aleksandar Petrov, Pierre Fernandez, Tomáš Souček et al. | arXiv · cs.CR **2025** | <img width="400" alt="We Can Hide More Bits: The Unused Watermarking Capacity in Theory and in Practice" src="https://arxiv.org/html/2510.12812/x1.png"> | [Paper](https://arxiv.org/abs/2510.12812) [PDF](https://arxiv.org/pdf/2510.12812) `2510.12812` |
| **Diffusion-Based Image Editing for Breaking Robust Watermarks** Yunyi Ni, Finn Carter, Ze Niu et al. | arXiv · cs.CV **2025** | — | [Paper](https://arxiv.org/abs/2510.05978) [PDF](https://arxiv.org/pdf/2510.05978) `2510.05978` |
| **Fast, Secure, and High-Capacity Image Watermarking with Autoencoded Text Vectors** Gautier Evennou, Vivien Chappelier, Ewa Kijak | arXiv · cs.CR **2025** | <img width="400" alt="Fast, Secure, and High-Capacity Image Watermarking with Autoencoded Text Vectors" src="https://arxiv.org/html/2510.00799/x1.png"> | [Paper](https://arxiv.org/abs/2510.00799) [PDF](https://arxiv.org/pdf/2510.00799) `2510.00799` |
| **Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey** Jie Cao, Qi Li, Zelin Zhang et al. | arXiv · cs.CR **2025** | <img width="400" alt="Secure and Robust Watermarking for AI-generated Images: A Comprehensive Survey" src="https://arxiv.org/html/2510.02384v2/x1.png"> | [Paper](https://arxiv.org/abs/2510.02384) [PDF](https://arxiv.org/pdf/2510.02384) `2510.02384` |
| **Of-SemWat: High-payload text embedding for semantic watermarking of AI-generated images with arbitrary size** Benedetta Tondi, Andrea Costanzo, Mauro Barni | arXiv · cs.CR **2025** | <img width="400" alt="Of-SemWat: High-payload text embedding for semantic watermarking of AI-generated images with arbitrary size" src="https://arxiv.org/html/2509.24823/x1.png"> | [Paper](https://arxiv.org/abs/2509.24823) [PDF](https://arxiv.org/pdf/2509.24823) `2509.24823` |
| **LoT-Pass: Long-term-robust Image Watermarking for Image to Video Generation** Guanjie Wang, Zehua Ma, Han Fang et al. | arXiv · cs.CV **2025** | <img width="400" alt="LoT-Pass: Long-term-robust Image Watermarking for Image to Video Generation" src="https://arxiv.org/html/2509.17773v3/x1.png"> | [Paper](https://arxiv.org/abs/2509.17773) [PDF](https://arxiv.org/pdf/2509.17773) `2509.17773` |
| **DINVMark: A Deep Invertible Network for Video Watermarking** Jianbin Ji, Dawen Xu, Li Dong et al. | arXiv · cs.CR **2025** | <img width="400" alt="DINVMark: A Deep Invertible Network for Video Watermarking" src="https://arxiv.org/html/2509.17416/inn_and_tradition.png"> | [Paper](https://arxiv.org/abs/2509.17416) [PDF](https://arxiv.org/pdf/2509.17416) `2509.17416` |
| **An Efficient and Adaptive Watermark Detection System with Tile-based Error Correction** Xinrui Zhong, Xinze Feng, Jingwei Zuo et al. | arXiv · cs.DC **2025** | <img width="400" alt="An Efficient and Adaptive Watermark Detection System with Tile-based Error Correction" src="https://arxiv.org/html/2509.02447/x1.png"> | [Paper](https://arxiv.org/abs/2509.02447) [PDF](https://arxiv.org/pdf/2509.02447) `2509.02447` |
| **First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge** Fahad Shamshad, Tameem Bakr, Yahia Shaaban et al. | arXiv · cs.CV **2025** | <img width="400" alt="First-Place Solution to NeurIPS 2024 Invisible Watermark Removal Challenge" src="https://arxiv.org/html/2508.21072/x1.png"> | [Paper](https://arxiv.org/abs/2508.21072) [PDF](https://arxiv.org/pdf/2508.21072) `2508.21072` |
| **Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design** Yuhao Sun, Yihua Zhang, Gaowen Liu et al. | arXiv · cs.CR **2025** | <img width="400" alt="Invisible Watermarks, Visible Gains: Steering Machine Unlearning with Bi-Level Watermarking Design" src="https://arxiv.org/html/2508.10065/x1.png"> | [Paper](https://arxiv.org/abs/2508.10065) [PDF](https://arxiv.org/pdf/2508.10065) `2508.10065` |
| **Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimization** Ke Liu, Xuanhan Wang, Qilong Zhang et al. | arXiv · cs.CV **2025** | <img width="400" alt="Learning Generalizable and Efficient Image Watermarking via Hierarchical Two-Stage Optimization" src="https://arxiv.org/html/2508.08667/x1.png"> | [Paper](https://arxiv.org/abs/2508.08667) [PDF](https://arxiv.org/pdf/2508.08667) `2508.08667` |
| **MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Models** Po-Yuan Mao, Cheng-Chang Tsai, Chun-Shien Lu | arXiv · cs.CR **2025** | <img width="400" alt="MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Models" src="https://arxiv.org/html/2507.21195/x1.png"> | [Paper](https://arxiv.org/abs/2507.21195) [PDF](https://arxiv.org/pdf/2507.21195) `2507.21195` |
| **TAG-WM: Tamper-Aware Generative Image Watermarking via Diffusion Inversion Sensitivity** Yuzhuo Chen, Zehua Ma, Han Fang et al. | arXiv · cs.MM **2025** | <img width="400" alt="TAG-WM: Tamper-Aware Generative Image Watermarking via Diffusion Inversion Sensitivity" src="https://arxiv.org/html/2506.23484/figures/framework.png"> | [Paper](https://arxiv.org/abs/2506.23484) [PDF](https://arxiv.org/pdf/2506.23484) `2506.23484` |
| **Peccavi: Visual Paraphrase Attack Safe and Distortion Free Image Watermarking Technique for AI-Generated Images** Shreyas Dixit, Ashhar Aziz, Shashwat Bajpai et al. | arXiv · cs.CV **2025** | <img width="400" alt="Peccavi: Visual Paraphrase Attack Safe and Distortion Free Image Watermarking Technique for AI-Generated Images" src="https://arxiv.org/html/2506.22960/x1.png"> | [Paper](https://arxiv.org/abs/2506.22960) [PDF](https://arxiv.org/pdf/2506.22960) `2506.22960` |
| **BitMark: Watermarking Bitwise Autoregressive Image Generative Models** Louis Kerner, Michel Meintz, Bihe Zhao et al. | arXiv · cs.CV **2025** | <img width="400" alt="BitMark: Watermarking Bitwise Autoregressive Image Generative Models" src="https://arxiv.org/html/2506.21209/x1.png"> | [Paper](https://arxiv.org/abs/2506.21209) [PDF](https://arxiv.org/pdf/2506.21209) `2506.21209` |
| **Dynamic Watermark Generation for Digital Images using Perimeter Gated SPAD Imager PUFs** Md Sakibur Sajal, Marc Dandin | MWSCAS 2025 Conference **2025** | <img width="400" alt="Dynamic Watermark Generation for Digital Images using Perimeter Gated SPAD Imager PUFs" src="https://arxiv.org/html/2506.17134/extracted/6541951/figures/water_fig1_v1.png"> | [Paper](https://arxiv.org/abs/2506.17134) [PDF](https://arxiv.org/pdf/2506.17134) `2506.17134` |
| **Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack** Siqi Hui, Yiren Song, Sanping Zhou et al. | arXiv · cs.CR **2025** | <img width="400" alt="Autoregressive Images Watermarking through Lexical Biasing: An Approach Resistant to Regeneration Attack" src="https://arxiv.org/html/2506.01011/x1.png"> | [Paper](https://arxiv.org/abs/2506.01011) [PDF](https://arxiv.org/pdf/2506.01011) `2506.01011` |
| **VideoMarkBench: Benchmarking Robustness of Video Watermarking** Zhengyuan Jiang, Moyang Guo, Kecen Li et al. | arXiv · cs.CR **2025** | — | [Paper](https://arxiv.org/abs/2505.21620) [PDF](https://arxiv.org/pdf/2505.21620) `2505.21620` |
| **Training-Free Watermarking for Autoregressive Image Generation** Yu Tong, Zihao Pan, Shuai Yang et al. | arXiv · cs.CV **2025** | <img width="400" alt="Training-Free Watermarking for Autoregressive Image Generation" src="https://arxiv.org/html/2505.14673/x1.png"> | [Paper](https://arxiv.org/abs/2505.14673) [PDF](https://arxiv.org/pdf/2505.14673) `2505.14673` |
| **Removing Watermarks with Partial Regeneration using Semantic Information** Krti Tallam, John Kevin Cava, Caleb Geniesse et al. | arXiv · cs.CV **2025** | <img width="400" alt="Removing Watermarks with Partial Regeneration using Semantic Information" src="https://arxiv.org/html/2505.08234/x1.png"> | [Paper](https://arxiv.org/abs/2505.08234) [PDF](https://arxiv.org/pdf/2505.08234) `2505.08234` |
| **SSH-Net: A Self-Supervised and Hybrid Network for Noisy Image Watermark Removal** Wenyang Liu, Jianjun Gao, Kim-Hui Yap | arXiv · cs.MM **2025** | <img width="400" alt="SSH-Net: A Self-Supervised and Hybrid Network for Noisy Image Watermark Removal" src="https://arxiv.org/html/2505.05088/x1.png"> | [Paper](https://arxiv.org/abs/2505.05088) [PDF](https://arxiv.org/pdf/2505.05088) `2505.05088` |
| **GenPTW: Latent Image Watermarking for Provenance Tracing and Tamper Localization** Zhenliang Gan, Chunya Liu, Yichao Tang et al. | arXiv · cs.CR **2025** | <img width="400" alt="GenPTW: Latent Image Watermarking for Provenance Tracing and Tamper Localization" src="https://arxiv.org/html/2504.19567/x1.png"> | [Paper](https://arxiv.org/abs/2504.19567) [PDF](https://arxiv.org/pdf/2504.19567) `2504.19567` |
| **VideoMark: A Distortion-Free Robust Watermarking Framework for Video Diffusion Models** Xuming Hu, Hanqian Li, Jungang Li et al. | arXiv · cs.CR **2025** | <img width="400" alt="VideoMark: A Distortion-Free Robust Watermarking Framework for Video Diffusion Models" src="https://arxiv.org/html/2504.16359/x1.png"> | [Paper](https://arxiv.org/abs/2504.16359) [PDF](https://arxiv.org/pdf/2504.16359) `2504.16359` |
| **Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models** Zijin Yang, Xin Zhang, Kejiang Chen et al. | arXiv · cs.CV **2025** | <img width="400" alt="Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models" src="https://arxiv.org/html/2504.15026/x1.png"> | [Paper](https://arxiv.org/abs/2504.15026) [PDF](https://arxiv.org/pdf/2504.15026) `2504.15026` |
| **Saliency-Aware Diffusion Reconstruction for Effective Invisible Watermark Removal** Inzamamul Alam, Md Tanvir Islam, Simon S. Woo | The Web Conference 2025 **2025** | — | [Paper](https://arxiv.org/abs/2504.12809) [PDF](https://arxiv.org/pdf/2504.12809) `2504.12809` |
| **Mask Image Watermarking** Runyi Hu, Jie Zhang, Shiqian Zhao et al. | arXiv · cs.CV **2025** | <img width="400" alt="Mask Image Watermarking" src="https://arxiv.org/html/2504.12739/x1.png"> | [Paper](https://arxiv.org/abs/2504.12739) [PDF](https://arxiv.org/pdf/2504.12739) `2504.12739` |
| **PT-Mark: Invisible Watermarking for Text-to-image Diffusion Models via Semantic-aware Pivotal Tuning** Yaopeng Wang, Huiyu Xu, Zhibo Wang et al. | arXiv · cs.CR **2025** | <img width="400" alt="PT-Mark: Invisible Watermarking for Text-to-image Diffusion Models via Semantic-aware Pivotal Tuning" src="https://arxiv.org/html/2504.10853/x1.png"> | [Paper](https://arxiv.org/abs/2504.10853) [PDF](https://arxiv.org/pdf/2504.10853) `2504.10853` |
| **RoSMM: A Robust and Secure Multi-Modal Watermarking Framework for Diffusion Models** ZhongLi Fang, Yu Xie, Ping Chen | arXiv · cs.MM **2025** | <img width="400" alt="RoSMM: A Robust and Secure Multi-Modal Watermarking Framework for Diffusion Models" src="https://arxiv.org/html/2504.02640/x1.png"> | [Paper](https://arxiv.org/abs/2504.02640) [PDF](https://arxiv.org/pdf/2504.02640) `2504.02640` |
| **Is Your Writing Being Mimicked by AI? Unveiling Imitation with Invisible Watermarks in Creative Writing** Ziwei Zhang, Juan Wen, Wanli Peng et al. | arXiv · cs.CR **2025** | <img width="400" alt="Is Your Writing Being Mimicked by AI? Unveiling Imitation with Invisible Watermarks in Creative Writing" src="https://arxiv.org/html/2504.00035/x1.png"> | [Paper](https://arxiv.org/abs/2504.00035) [PDF](https://arxiv.org/pdf/2504.00035) `2504.00035` |
| **WMCopier: Forging Invisible Image Watermarks on Arbitrary Images** Ziping Dong, Chao Shuai, Zhongjie Ba et al. | arXiv · cs.CR **2025** | <img width="400" alt="WMCopier: Forging Invisible Image Watermarks on Arbitrary Images" src="https://arxiv.org/html/2503.22330/fig/framework.png"> | [Paper](https://arxiv.org/abs/2503.22330) [PDF](https://arxiv.org/pdf/2503.22330) `2503.22330` |
| **Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations** Haitong Liu, Kuofeng Gao, Yang Bai et al. | arXiv · cs.CV **2025** | <img width="400" alt="Protecting Your Video Content: Disrupting Automated Video-based LLM Annotations" src="https://arxiv.org/html/2503.21824/x1.png"> | [Paper](https://arxiv.org/abs/2503.21824) [PDF](https://arxiv.org/pdf/2503.21824) `2503.21824` |
| **GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting** Lijiang Li, Jinglu Wang, Xiang Ming et al. | arXiv · cs.CV **2025** | <img width="400" alt="GS-Marker: Generalizable and Robust Watermarking for 3D Gaussian Splatting" src="https://arxiv.org/html/2503.18718/x1.png"> | [Paper](https://arxiv.org/abs/2503.18718) [PDF](https://arxiv.org/pdf/2503.18718) `2503.18718` |
| **Text-Guided Image Invariant Feature Learning for Robust Image Watermarking** Muhammad Ahtesham, Xin Zhong | arXiv · cs.CV **2025** | <img width="400" alt="Text-Guided Image Invariant Feature Learning for Robust Image Watermarking" src="https://arxiv.org/html/2503.13805/extracted/6288531/images/Method.png"> | [Paper](https://arxiv.org/abs/2503.13805) [PDF](https://arxiv.org/pdf/2503.13805) `2503.13805` |
| **SEAL: Semantic Aware Image Watermarking** Kasra Arabi, R. Teal Witter, Chinmay Hegde et al. | arXiv · cs.LG **2025** | <img width="400" alt="SEAL: Semantic Aware Image Watermarking" src="https://arxiv.org/html/2503.12172v4/Figures/fig1.png"> | [Paper](https://arxiv.org/abs/2503.12172) [PDF](https://arxiv.org/pdf/2503.12172) `2503.12172` |
| **Your Text Encoder Can Be An Object-Level Watermarking Controller** Naresh Kumar Devulapally, Mingzhen Huang, Vishal Asnani et al. | arXiv · cs.CV **2025** | <img width="400" alt="Your Text Encoder Can Be An Object-Level Watermarking Controller" src="https://arxiv.org/html/2503.11945/extracted/6282091/sec/figures/method_final.jpeg"> | [Paper](https://arxiv.org/abs/2503.11945) [PDF](https://arxiv.org/pdf/2503.11945) `2503.11945` |
| **Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking** Ziyi Wang, Songbai Tan, Gang Xu et al. | arXiv · cs.MM **2025** | <img width="400" alt="Safe-VAR: Safe Visual Autoregressive Model for Text-to-Image Generative Watermarking" src="https://arxiv.org/html/2503.11324/x1.png"> | [Paper](https://arxiv.org/abs/2503.11324) [PDF](https://arxiv.org/pdf/2503.11324) `2503.11324` |
| **Provenance Detection for AI-Generated Images: Combining Perceptual Hashing, Homomorphic Encryption, and AI Detection Models** Shree Singhi, Aayan Yadav, Aayush Gupta et al. | arXiv · cs.CV **2025** | — | [Paper](https://arxiv.org/abs/2503.11195) [PDF](https://arxiv.org/pdf/2503.11195) `2503.11195` |
| **The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fields** Ziyuan Luo, Anderson Rocha, Boxin Shi et al. | arXiv · cs.CV **2025** | <img width="400" alt="The NeRF Signature: Codebook-Aided Watermarking for Neural Radiance Fields" src="https://arxiv.org/html/2502.19125/x1.png"> | [Paper](https://arxiv.org/abs/2502.19125) [PDF](https://arxiv.org/pdf/2502.19125) `2502.19125` |
| **Deep Learning-based Dual Watermarking for Image Copyright Protection and Authentication** Sudev Kumar Padhi, Archana Tiwari, Sk. Subidh Ali | arXiv · cs.CR **2025** | <img width="400" alt="Deep Learning-based Dual Watermarking for Image Copyright Protection and Authentication" src="https://arxiv.org/html/2502.18501/extracted/6222248/figures/nn2.png"> | [Paper](https://arxiv.org/abs/2502.18501) [PDF](https://arxiv.org/pdf/2502.18501) `2502.18501` |
| **A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior** Hengyue Liang, Taihui Li, Ju Sun | arXiv · eess.IV **2025** | <img width="400" alt="A Baseline Method for Removing Invisible Image Watermarks using Deep Image Prior" src="https://arxiv.org/html/2502.13998/extracted/6589049/source-figures/watermark-vis/clean.png"> | [Paper](https://arxiv.org/abs/2502.13998) [PDF](https://arxiv.org/pdf/2502.13998) `2502.13998` |
| **Image Watermarking of Generative Diffusion Models** Yunzhuo Chen, Jordan Vice, Naveed Akhtar et al. | arXiv · eess.IV **2025** | <img width="400" alt="Image Watermarking of Generative Diffusion Models" src="https://arxiv.org/html/2502.10465/extracted/6197882/intro.png"> | [Paper](https://arxiv.org/abs/2502.10465) [PDF](https://arxiv.org/pdf/2502.10465) `2502.10465` |
| **Fast In-Spectrum Graph Watermarks** Jade Garcia Bourrée, Anne-Marie Kermarrec, Erwan Le Merrer et al. | arXiv · cs.DS **2025** | <img width="400" alt="Fast In-Spectrum Graph Watermarks" src="https://arxiv.org/html/2502.04182/x1.png"> | [Paper](https://arxiv.org/abs/2502.04182) [PDF](https://arxiv.org/pdf/2502.04182) `2502.04182` |
| **On the Coexistence and Ensembling of Watermarks** Aleksandar Petrov, Shruti Agarwal, Philip H. S. Torr et al. | arXiv · cs.CV **2025** | <img width="400" alt="On the Coexistence and Ensembling of Watermarks" src="https://arxiv.org/html/2501.17356/x1.png"> | [Paper](https://arxiv.org/abs/2501.17356) [PDF](https://arxiv.org/pdf/2501.17356) `2501.17356` |
| **SAT-LDM: Provably Generalizable Image Watermarking for Latent Diffusion Models with Self-Augmented Training** Lu Zhang, Liang Zeng | arXiv · cs.LG **2024** | <img width="400" alt="SAT-LDM: Provably Generalizable Image Watermarking for Latent Diffusion Models with Self-Augmented Training" src="https://arxiv.org/html/2501.00463/x1.png"> | [Paper](https://arxiv.org/abs/2501.00463) [PDF](https://arxiv.org/pdf/2501.00463) `2501.00463` |
| **RoboSignature: Robust Signature and Watermarking on Network Attacks** Aryaman Shaan, Garvit Banga, Raghav Mantri | arXiv · cs.CR **2024** | — | [Paper](https://arxiv.org/abs/2412.19834) [PDF](https://arxiv.org/pdf/2412.19834) `2412.19834` |
| **Invisible Watermarks: Attacks and Robustness** Dongjun Hwang, Sungwon Woo, Tom Gao et al. | arXiv · cs.CV **2024** | <img width="400" alt="Invisible Watermarks: Attacks and Robustness" src="https://arxiv.org/html/2412.12511/x1.png"> | [Paper](https://arxiv.org/abs/2412.12511) [PDF](https://arxiv.org/pdf/2412.12511) `2412.12511` |
| **SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolution** Runyi Hu, Jie Zhang, Yiming Li et al. | arXiv · cs.CV **2024** | <img width="400" alt="SuperMark: Robust and Training-free Image Watermarking via Diffusion-based Super-Resolution" src="https://arxiv.org/html/2412.10049/x1.png"> | [Paper](https://arxiv.org/abs/2412.10049) [PDF](https://arxiv.org/pdf/2412.10049) `2412.10049` |
| **Video Seal: Open and Efficient Video Watermarking** Pierre Fernandez, Hady Elsahar, I. Zeki Yalniz et al. | arXiv · cs.MM **2024** | <img width="400" alt="Video Seal: Open and Efficient Video Watermarking" src="https://arxiv.org/html/2412.09492/x1.png"> | [Paper](https://arxiv.org/abs/2412.09492) [PDF](https://arxiv.org/pdf/2412.09492) `2412.09492` |
| **LVMark: Robust Watermark for Latent Video Diffusion Models** Youngdong Jang, MinHyuk Jang, JaeHyeok Lee et al. | arXiv · cs.CV **2024** | <img width="400" alt="LVMark: Robust Watermark for Latent Video Diffusion Models" src="https://arxiv.org/html/2412.09122v4/x1.png"> | [Paper](https://arxiv.org/abs/2412.09122) [PDF](https://arxiv.org/pdf/2412.09122) `2412.09122` |
| **Hidden in the Noise: Two-Stage Robust Watermarking for Images** Kasra Arabi, Benjamin Feuer, R. Teal Witter et al. | arXiv · cs.CV **2024** | <img width="400" alt="Hidden in the Noise: Two-Stage Robust Watermarking for Images" src="https://arxiv.org/html/2412.04653/extracted/6393021/images/graphic_comparison.png"> | [Paper](https://arxiv.org/abs/2412.04653) [PDF](https://arxiv.org/pdf/2412.04653) `2412.04653` |
| **The Efficacy of Transfer-based No-box Attacks on Image Watermarking: A Pragmatic Analysis** Qilong Wu, Varun Chandrasekaran | arXiv · cs.CR **2024** | <img width="400" alt="The Efficacy of Transfer-based No-box Attacks on Image Watermarking: A Pragmatic Analysis" src="https://arxiv.org/html/2412.02576/extracted/6042631/figures/image_samples/unwatermarked.png"> | [Paper](https://arxiv.org/abs/2412.02576) [PDF](https://arxiv.org/pdf/2412.02576) `2412.02576` |
| **OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking** Xuanyu Zhang, Zecheng Tang, Zhipei Xu et al. | arXiv · cs.CV **2024** | <img width="400" alt="OmniGuard: Hybrid Manipulation Localization via Augmented Versatile Deep Image Watermarking" src="https://arxiv.org/html/2412.01615/x1.png"> | [Paper](https://arxiv.org/abs/2412.01615) [PDF](https://arxiv.org/pdf/2412.01615) `2412.01615` |
| **Watermark Anything with Localized Messages** Tom Sander, Pierre Fernandez, Alain Durmus et al. | arXiv · cs.CV **2024** | <img width="400" alt="Watermark Anything with Localized Messages" src="https://arxiv.org/html/2411.07231/x1.png"> | [Paper](https://arxiv.org/abs/2411.07231) [PDF](https://arxiv.org/pdf/2411.07231) `2411.07231` |
| **Ideal Pseudorandom Codes** Omar Alrabiah, Prabhanjan Ananth, Miranda Christ et al. | arXiv · cs.CR **2024** | — | [Paper](https://arxiv.org/abs/2411.05947) [PDF](https://arxiv.org/pdf/2411.05947) `2411.05947` |
| **ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization** Huayang Huang, Yu Wu, Qian Wang | arXiv · cs.CV **2024** | <img width="400" alt="ROBIN: Robust and Invisible Watermarks for Diffusion Models with Adversarial Optimization" src="https://arxiv.org/html/2411.03862/x1.png"> | [Paper](https://arxiv.org/abs/2411.03862) [PDF](https://arxiv.org/pdf/2411.03862) `2411.03862` |
| **GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting** Xiufeng Huang, Ruiqi Li, Yiu-ming Cheung et al. | arXiv · cs.CV **2024** | <img width="400" alt="GaussianMarker: Uncertainty-Aware Copyright Protection of 3D Gaussian Splatting" src="https://arxiv.org/html/2410.23718/x1.png"> | [Paper](https://arxiv.org/abs/2410.23718) [PDF](https://arxiv.org/pdf/2410.23718) `2410.23718` |
| **Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Models** Wenda Li, Huijie Zhang, Qing Qu | arXiv · cs.LG **2024** | <img width="400" alt="Shallow Diffuse: Robust and Invisible Watermarking through Low-Dimensional Subspaces in Diffusion Models" src="https://arxiv.org/html/2410.21088/arxiv_deepthink/Deepthink_landscape_do_not_delete_compressed.png"> | [Paper](https://arxiv.org/abs/2410.21088) [PDF](https://arxiv.org/pdf/2410.21088) `2410.21088` |

## Generative AI Watermarking

**39 papers · newest first**

| **Title & Authors** | **Venue/Year** | **Introduction** | **Links** |
|:---|:---:|:---|:---:|
| **IRIS: Visual-Semantic Binding for Forgery-Resistant Watermarking of Diffusion Images** Xiaoyan Feng, Zheng Gao, Tong Guan et al. | arXiv · cs.CV **2026** | <img width="400" alt="IRIS: Visual-Semantic Binding for Forgery-Resistant Watermarking of Diffusion Images" src="https://arxiv.org/html/2608.03539/2608.03539v1/x1.png"> | [Paper](https://arxiv.org/abs/2608.03539) [PDF](https://arxiv.org/pdf/2608.03539) `2608.03539` |
| **FDDWAN: A Frequency-Decoupled Diffusion Network for Watermarking Attack** Chunpeng Wang, Yuxin Li, Xiaoyu Wang et al. | arXiv · cs.CV **2026** | <img width="400" alt="FDDWAN: A Frequency-Decoupled Diffusion Network for Watermarking Attack" src="https://arxiv.org/html/2607.27800/2607.27800v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.27800) [PDF](https://arxiv.org/pdf/2607.27800) `2607.27800` |
| **AnchorMark: Robust Diffusion Watermarking via Latent-Space Rotation Synchrony** Yuqi Qian, Yun Cao, Haocheng Fu et al. | arXiv · cs.CR **2026** | <img width="400" alt="AnchorMark: Robust Diffusion Watermarking via Latent-Space Rotation Synchrony" src="https://arxiv.org/html/2607.27551/2607.27551v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.27551) [PDF](https://arxiv.org/pdf/2607.27551) `2607.27551` |
| **Observation-Level Watermarking and Detection for Tabular Data** Dongyu Cui, Xuan Bi | arXiv · stat.ME **2026** | — | [Paper](https://arxiv.org/abs/2607.10554) [PDF](https://arxiv.org/pdf/2607.10554) `2607.10554` |
| **BiSLW: Bi-Spectral Latent Watermarking for Generative Diffusion Models** Aryan Pandit | arXiv · cs.CV **2026** | <img width="400" alt="BiSLW: Bi-Spectral Latent Watermarking for Generative Diffusion Models" src="https://arxiv.org/html/2607.02643v1/figures/bislw_watermarking_pipeline_diagram.jpg"> | [Paper](https://arxiv.org/abs/2607.02643) [PDF](https://arxiv.org/pdf/2607.02643) `2607.02643` |
| **Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing** Leyi Qi, Yiming Li, Siyuan Liang et al. | the International Conference on Machine Learning (ICML) 2026 **2026** | <img width="400" alt="Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing" src="https://arxiv.org/html/2605.29809v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.29809) [PDF](https://arxiv.org/pdf/2605.29809) `2605.29809` |
| **LoRA-Key: User-Centric LoRA Watermarking for Text-to-Image Diffusion Models** Yaopeng Wang, Qingliang Wang, Zhibo Wang et al. | arXiv · cs.CR **2026** | <img width="400" alt="LoRA-Key: User-Centric LoRA Watermarking for Text-to-Image Diffusion Models" src="https://arxiv.org/html/2605.29569v2/x1.png"> | [Paper](https://arxiv.org/abs/2605.29569) [PDF](https://arxiv.org/pdf/2605.29569) `2605.29569` |
| **Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio** Georgios Milis, Yubin Qin, Yihan Wu et al. | ICML 2026 **2026** | <img width="400" alt="Hidden in Plain Tokens: Simply Robust, Gradient-Free Watermark for Synthetic Audio" src="https://arxiv.org/html/2605.25967v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.25967) [PDF](https://arxiv.org/pdf/2605.25967) `2605.25967` |
| **Removing the Watermark Is Not Enough: Forensic Stealth in Generative-AI Watermark Removal** Yevin Nikhel Goonatilake, Giuseppe Ateniese | arXiv · cs.CR **2026** | <img width="400" alt="Removing the Watermark Is Not Enough: Forensic Stealth in Generative-AI Watermark Removal" src="https://arxiv.org/html/2605.09203v1/figures/pipeline-overview.png"> | [Paper](https://arxiv.org/abs/2605.09203) [PDF](https://arxiv.org/pdf/2605.09203) `2605.09203` |
| **CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint** Jiewei Lai, Lan Zhang, Chen Tang et al. | arXiv · cs.CV **2026** | <img width="400" alt="CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint" src="https://arxiv.org/html/2605.01479v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.01479) [PDF](https://arxiv.org/pdf/2605.01479) `2605.01479` |
| **Dual-Guard: Dual-Channel Latent Watermarking for Provenance and Tamper Localization in Diffusion Images** JinFeng Xie, Chengfu Ou, Peipeng Yu et al. | arXiv · cs.CR **2026** | <img width="400" alt="Dual-Guard: Dual-Channel Latent Watermarking for Provenance and Tamper Localization in Diffusion Images" src="https://arxiv.org/html/2604.19090v1/teaser.png"> | [Paper](https://arxiv.org/abs/2604.19090) [PDF](https://arxiv.org/pdf/2604.19090) `2604.19090` |
| **Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication** Yi Zhang, Hongbo Huang, Liang-Jie Zhang | arXiv · cs.CV **2026** | <img width="400" alt="Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication" src="https://arxiv.org/html/2603.26167v2/x1.png"> | [Paper](https://arxiv.org/abs/2603.26167) [PDF](https://arxiv.org/pdf/2603.26167) `2603.26167` |
| **High-Fidelity Face Content Recovery via Tamper-Resilient Versatile Watermarking** Peipeng Yu, Jinfeng Xie, Chengfu Ou et al. | arXiv · cs.CV **2026** | <img width="400" alt="High-Fidelity Face Content Recovery via Tamper-Resilient Versatile Watermarking" src="https://arxiv.org/html/2603.23940v1/x1.png"> | [Paper](https://arxiv.org/abs/2603.23940) [PDF](https://arxiv.org/pdf/2603.23940) `2603.23940` |
| **The Orthogonal Vulnerabilities of Generative AI Watermarks: A Comparative Empirical Benchmark of Spatial and Latent Provenance** Jesse Yu, Nicholas Wei | arXiv · cs.CR **2026** | — | [Paper](https://arxiv.org/abs/2603.10323) [PDF](https://arxiv.org/pdf/2603.10323) `2603.10323` |
| **OSI: One-step Inversion Excels in Extracting Diffusion Watermarks** Yuwei Chen, Zhenliang He, Jia Tang et al. | arXiv · cs.CV **2026** | <img width="400" alt="OSI: One-step Inversion Excels in Extracting Diffusion Watermarks" src="https://arxiv.org/html/2602.09494/x1.png"> | [Paper](https://arxiv.org/abs/2602.09494) [PDF](https://arxiv.org/pdf/2602.09494) `2602.09494` |
| **ALIEN: Analytic Latent Watermarking for Controllable Generation** Liangqi Lei, Keke Gai, Jing Yu et al. | arXiv · eess.IV **2026** | <img width="400" alt="ALIEN: Analytic Latent Watermarking for Controllable Generation" src="https://arxiv.org/html/2602.06101/x1.png"> | [Paper](https://arxiv.org/abs/2602.06101) [PDF](https://arxiv.org/pdf/2602.06101) `2602.06101` |
| **SemBind: Binding Diffusion Watermarks to Semantics Against Black-Box Forgery Attacks** Xin Zhang, Zijin Yang, Kejiang Chen et al. | arXiv · cs.CR **2026** | — | [Paper](https://arxiv.org/abs/2601.20310) [PDF](https://arxiv.org/pdf/2601.20310) `2601.20310` |
| **Learning to Watermark in the Latent Space of Generative Models** Sylvestre-Alvise Rebuffi, Tuan Tran, Valeriu Lacatusu et al. | arXiv · cs.CV **2026** | <img width="400" alt="Learning to Watermark in the Latent Space of Generative Models" src="https://arxiv.org/html/2601.16140/x1.png"> | [Paper](https://arxiv.org/abs/2601.16140) [PDF](https://arxiv.org/pdf/2601.16140) `2601.16140` |
| **LR-DWM: Efficient Watermarking for Diffusion Language Models** Ofek Raban, Ethan Fetaya, Gal Chechik | arXiv · cs.CL **2026** | <img width="400" alt="LR-DWM: Efficient Watermarking for Diffusion Language Models" src="https://arxiv.org/html/2601.12376/costplot_fixed.png"> | [Paper](https://arxiv.org/abs/2601.12376) [PDF](https://arxiv.org/pdf/2601.12376) `2601.12376` |
| **SPDMark: Selective Parameter Displacement for Robust Video Watermarking** Samar Fares, Nurbek Tastan, Karthik Nandakumar | arXiv · cs.CV **2025** | <img width="400" alt="SPDMark: Selective Parameter Displacement for Robust Video Watermarking" src="https://arxiv.org/html/2512.12090v2/x1.png"> | [Paper](https://arxiv.org/abs/2512.12090) [PDF](https://arxiv.org/pdf/2512.12090) `2512.12090` |
| **HMARK: Radioactive Multi-Bit Semantic-Latent Watermarking for Diffusion Models** Kexin Li, Guozhen Ding, Ilya Grishchenko et al. | arXiv · cs.CR **2025** | <img width="400" alt="HMARK: Radioactive Multi-Bit Semantic-Latent Watermarking for Diffusion Models" src="https://arxiv.org/html/2512.00094/4-Evaluation/figures/orig_img_01505.png"> | [Paper](https://arxiv.org/abs/2512.00094) [PDF](https://arxiv.org/pdf/2512.00094) `2512.00094` |
| **OptMark: Robust Multi-bit Diffusion Watermarking via Inference Time Optimization** Jiazheng Xing, Hai Ci, Hongbin Xu et al. | arXiv · cs.CR **2025** | <img width="400" alt="OptMark: Robust Multi-bit Diffusion Watermarking via Inference Time Optimization" src="https://arxiv.org/html/2508.21727/x1.png"> | [Paper](https://arxiv.org/abs/2508.21727) [PDF](https://arxiv.org/pdf/2508.21727) `2508.21727` |
| **MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Models** Po-Yuan Mao, Cheng-Chang Tsai, Chun-Shien Lu | arXiv · cs.CR **2025** | <img width="400" alt="MaXsive: High-Capacity and Robust Training-Free Generative Image Watermarking in Diffusion Models" src="https://arxiv.org/html/2507.21195/x1.png"> | [Paper](https://arxiv.org/abs/2507.21195) [PDF](https://arxiv.org/pdf/2507.21195) `2507.21195` |
| **KGMark: A Diffusion Watermark for Knowledge Graphs** Hongrui Peng, Haolang Lu, Yuanlong Yu et al. | arXiv · cs.CR **2025** | <img width="400" alt="KGMark: A Diffusion Watermark for Knowledge Graphs" src="https://arxiv.org/html/2505.23873/x1.png"> | [Paper](https://arxiv.org/abs/2505.23873) [PDF](https://arxiv.org/pdf/2505.23873) `2505.23873` |
| **Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Image** Anubhav Jain, Yuya Kobayashi, Naoki Murata et al. | arXiv · cs.CV **2025** | <img width="400" alt="Forging and Removing Latent-Noise Diffusion Watermarks Using a Single Image" src="https://arxiv.org/html/2504.20111/x1.png"> | [Paper](https://arxiv.org/abs/2504.20111) [PDF](https://arxiv.org/pdf/2504.20111) `2504.20111` |
| **Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models** Zijin Yang, Xin Zhang, Kejiang Chen et al. | arXiv · cs.CV **2025** | <img width="400" alt="Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models" src="https://arxiv.org/html/2504.15026/x1.png"> | [Paper](https://arxiv.org/abs/2504.15026) [PDF](https://arxiv.org/pdf/2504.15026) `2504.15026` |
| **Image Watermarking of Generative Diffusion Models** Yunzhuo Chen, Jordan Vice, Naveed Akhtar et al. | arXiv · eess.IV **2025** | <img width="400" alt="Image Watermarking of Generative Diffusion Models" src="https://arxiv.org/html/2502.10465/extracted/6197882/intro.png"> | [Paper](https://arxiv.org/abs/2502.10465) [PDF](https://arxiv.org/pdf/2502.10465) `2502.10465` |
| **LVMark: Robust Watermark for Latent Video Diffusion Models** Youngdong Jang, MinHyuk Jang, JaeHyeok Lee et al. | arXiv · cs.CV **2024** | <img width="400" alt="LVMark: Robust Watermark for Latent Video Diffusion Models" src="https://arxiv.org/html/2412.09122v4/x1.png"> | [Paper](https://arxiv.org/abs/2412.09122) [PDF](https://arxiv.org/pdf/2412.09122) `2412.09122` |
| **Ideal Pseudorandom Codes** Omar Alrabiah, Prabhanjan Ananth, Miranda Christ et al. | arXiv · cs.CR **2024** | — | [Paper](https://arxiv.org/abs/2411.05947) [PDF](https://arxiv.org/pdf/2411.05947) `2411.05947` |
| **Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography** Jiahao Zhu, Zixuan Chen, Jiali Liu et al. | arXiv · cs.CR **2024** | <img width="400" alt="Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography" src="https://arxiv.org/html/2409.04878v5/x1.png"> | [Paper](https://arxiv.org/abs/2409.04878) [PDF](https://arxiv.org/pdf/2409.04878) `2409.04878` |
| **Latent Watermarking of Audio Generative Models** Robin San Roman, Pierre Fernandez, Antoine Deleforge et al. | arXiv · cs.SD **2024** | <img width="400" alt="Latent Watermarking of Audio Generative Models" src="https://arxiv.org/html/2409.02915/x1.png"> | [Paper](https://arxiv.org/abs/2409.02915) [PDF](https://arxiv.org/pdf/2409.02915) `2409.02915` |
| **WMAdapter: Adding WaterMark Control to Latent Diffusion Models** Hai Ci, Yiren Song, Pei Yang et al. | arXiv · cs.CV **2024** | <img width="400" alt="WMAdapter: Adding WaterMark Control to Latent Diffusion Models" src="https://arxiv.org/html/2406.08337/x1.png"> | [Paper](https://arxiv.org/abs/2406.08337) [PDF](https://arxiv.org/pdf/2406.08337) `2406.08337` |
| **RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification** Hai Ci, Pei Yang, Yiren Song et al. | arXiv · cs.CV **2024** | <img width="400" alt="RingID: Rethinking Tree-Ring Watermarking for Enhanced Multi-Key Identification" src="https://arxiv.org/html/2404.14055/x1.png"> | [Paper](https://arxiv.org/abs/2404.14055) [PDF](https://arxiv.org/pdf/2404.14055) `2404.14055` |
| **Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models** Zijin Yang, Kai Zeng, Kejiang Chen et al. | arXiv · cs.CV **2024** | <img width="400" alt="Gaussian Shading: Provable Performance-Lossless Image Watermarking for Diffusion Models" src="https://arxiv.org/html/2404.04956/extracted/2404.04956v3/sec/figure/nowatermark.png"> | [Paper](https://arxiv.org/abs/2404.04956) [PDF](https://arxiv.org/pdf/2404.04956) `2404.04956` |
| **Latent Watermark: Inject and Detect Watermarks in Latent Diffusion Space** Zheling Meng, Bo Peng, Jing Dong | arXiv · cs.CV **2024** | — | [Paper](https://arxiv.org/abs/2404.00230) [PDF](https://arxiv.org/pdf/2404.00230) `2404.00230` |
| **ProMark: Proactive Diffusion Watermarking for Causal Attribution** Vishal Asnani, John Collomosse, Tu Bui et al. | CVPR 2024 **2024** | <img width="400" alt="ProMark: Proactive Diffusion Watermarking for Causal Attribution" src="https://arxiv.org/html/2403.09914/x1.png"> | [Paper](https://arxiv.org/abs/2403.09914) [PDF](https://arxiv.org/pdf/2403.09914) `2403.09914` |
| **WAVES: Benchmarking the Robustness of Image Watermarks** Bang An, Mucong Ding, Tahseen Rabbani et al. | arXiv · cs.CV **2024** | <img width="400" alt="WAVES: Benchmarking the Robustness of Image Watermarks" src="https://arxiv.org/html/2401.08573/extracted/5650428/figures/waves_small.png"> | [Paper](https://arxiv.org/abs/2401.08573) [PDF](https://arxiv.org/pdf/2401.08573) `2401.08573` |
| **OVLA: Neural Network Ownership Verification using Latent Watermarks** Feisi Fu, Wenchao Li | arXiv · cs.CR **2023** | <img width="400" alt="OVLA: Neural Network Ownership Verification using Latent Watermarks" src="https://arxiv.org/html/2306.13215/x1.png"> | [Paper](https://arxiv.org/abs/2306.13215) [PDF](https://arxiv.org/pdf/2306.13215) `2306.13215` |
| **ReDMark: Framework for Residual Diffusion Watermarking on Deep Networks** Mahdi Ahmadi, Alireza Norouzi, S. M. Reza Soroushmehr et al. | arXiv · cs.MM **2018** | — | [Paper](https://arxiv.org/abs/1810.07248) [PDF](https://arxiv.org/pdf/1810.07248) `1810.07248` |

## Text and LLM Watermarking

**107 papers · newest first**

| **Title & Authors** | **Venue/Year** | **Introduction** | **Links** |
|:---|:---:|:---|:---:|
| **Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks** Xiaoyan Feng, Yanjun Zhang, He Zhang et al. | arXiv · cs.CR **2026** | <img width="400" alt="Tracing Provenance and Detecting Tampering with Complementary LLM Watermarks" src="https://arxiv.org/html/2608.12713/2608.12713v1/teaser.png"> | [Paper](https://arxiv.org/abs/2608.12713) [PDF](https://arxiv.org/pdf/2608.12713) `2608.12713` |
| **WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking** Song Xiao, Yuqi Yuan, Yanshuo Zhang et al. | arXiv · cs.CR **2026** | <img width="400" alt="WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking" src="https://arxiv.org/html/2608.06416/2608.06416v1/x1.png"> | [Paper](https://arxiv.org/abs/2608.06416) [PDF](https://arxiv.org/pdf/2608.06416) `2608.06416` |
| **DHMark: Public-Key Watermarking for LLM-Generated Text via Diffie-Hellman-Guided Rejection Sampling** Haocheng Fu, Yuqi Qian, Luyao Wang et al. | arXiv · cs.CR **2026** | <img width="400" alt="DHMark: Public-Key Watermarking for LLM-Generated Text via Diffie-Hellman-Guided Rejection Sampling" src="https://arxiv.org/html/2608.03093/2608.03093v1/x1.png"> | [Paper](https://arxiv.org/abs/2608.03093) [PDF](https://arxiv.org/pdf/2608.03093) `2608.03093` |
| **Efficient Online LLM Watermark Detection via Rao-Blackwellized E-Processes** Lu Luo, Dandan Mo, Chengdong Xu et al. | arXiv · stat.ML **2026** | <img width="400" alt="Efficient Online LLM Watermark Detection via Rao-Blackwellized E-Processes" src="https://arxiv.org/html/2607.21958/2607.21958v1/flow_chart.png"> | [Paper](https://arxiv.org/abs/2607.21958) [PDF](https://arxiv.org/pdf/2607.21958) `2607.21958` |
| **ChainMark: Model-Free LLM Watermarking with Closed-Form Calibration** Chengheng Li-Chen, Kyuhee Kim | arXiv · cs.CR **2026** | <img width="400" alt="ChainMark: Model-Free LLM Watermarking with Closed-Form Calibration" src="https://arxiv.org/html/2607.18445v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.18445) [PDF](https://arxiv.org/pdf/2607.18445) `2607.18445` |
| **SSTMark: Robust Training-Free Semantic-Level Speech Watermarking** Kuan-Lin Chu, Jun-Cheng Chen, Chun-Shien Lu | arXiv · cs.SD **2026** | <img width="400" alt="SSTMark: Robust Training-Free Semantic-Level Speech Watermarking" src="https://arxiv.org/html/2607.17592v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.17592) [PDF](https://arxiv.org/pdf/2607.17592) `2607.17592` |
| **AI Watermark Evidence Fails Forensic Readiness: An Empirical Evaluation** Saifur Rahman Tamim, Amir Labib Khan | arXiv · cs.CR **2026** | <img width="400" alt="AI Watermark Evidence Fails Forensic Readiness: An Empirical Evaluation" src="https://arxiv.org/html/2607.16010v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.16010) [PDF](https://arxiv.org/pdf/2607.16010) `2607.16010` |
| **WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency** Z Sun, Q Jiang, S Sheng et al. | arXiv · cs.CR **2026** | <img width="400" alt="WaterMoE: Expert-Routing-based Watermarking for High Fidelity and Efficiency" src="https://arxiv.org/html/2607.13099v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.13099) [PDF](https://arxiv.org/pdf/2607.13099) `2607.13099` |
| **Toward Stronger Code Watermarking: A Grammar-Driven Approach to Optimizing the Trade-off Between Quality and Detectability** Licheng Yu, Aiwei Liu, Songze Li | arXiv · cs.CR **2026** | <img width="400" alt="Toward Stronger Code Watermarking: A Grammar-Driven Approach to Optimizing the Trade-off Between Quality and Detectability" src="https://arxiv.org/html/2607.10210v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.10210) [PDF](https://arxiv.org/pdf/2607.10210) `2607.10210` |
| **A Survey on LLM Watermarking: Theory and Deployment** Huy Phan, Kieu Dang, Ojaswi Dulal et al. | arXiv · cs.CR **2026** | <img width="400" alt="A Survey on LLM Watermarking: Theory and Deployment" src="https://arxiv.org/html/2607.10103v1/figurellm.png"> | [Paper](https://arxiv.org/abs/2607.10103) [PDF](https://arxiv.org/pdf/2607.10103) `2607.10103` |
| **Beyond Heuristic Tuning: Power-Calibrated LLM Watermarking** Xiaopu Wang, Zelin He, Chengyuan Liu et al. | arXiv · stat.ML **2026** | <img width="400" alt="Beyond Heuristic Tuning: Power-Calibrated LLM Watermarking" src="https://arxiv.org/html/2607.05694v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.05694) [PDF](https://arxiv.org/pdf/2607.05694) `2607.05694` |
| **Robust Text Watermarking for Large Language Models via Dual Semantic Embeddings** Jonas Schäfer, Cezary Pilaszewicz, Gerhard Wunder | arXiv · cs.CL **2026** | — | [Paper](https://arxiv.org/abs/2606.31602) [PDF](https://arxiv.org/pdf/2606.31602) `2606.31602` |
| **CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarking** Joeun Kim, HoEun Kim, Young-Sik Kim | arXiv · cs.CR **2026** | <img width="400" alt="CORE-BREW: LLR-Based Soft Decoding for Robust Multi-Bit LLM Watermarking" src="https://arxiv.org/html/2606.24163v1/x1.png"> | [Paper](https://arxiv.org/abs/2606.24163) [PDF](https://arxiv.org/pdf/2606.24163) `2606.24163` |
| **Linguistics-Aware Non-Distortionary LLM Watermarking** Shinwoo Park, Hyejin Park, Hyeseon An et al. | arXiv · cs.CL **2026** | <img width="400" alt="Linguistics-Aware Non-Distortionary LLM Watermarking" src="https://arxiv.org/html/2606.00613v1/x1.png"> | [Paper](https://arxiv.org/abs/2606.00613) [PDF](https://arxiv.org/pdf/2606.00613) `2606.00613` |
| **AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing** Yuexin Li, Wenjie Qu, Linyu Wu et al. | arXiv · cs.CR **2026** | <img width="400" alt="AliMark: Enhancing Robustness of Sentence-Level Watermarking Against Text Paraphrasing" src="https://arxiv.org/html/2605.29434v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.29434) [PDF](https://arxiv.org/pdf/2605.29434) `2605.29434` |
| **Blind PRNG Hijacking: An Undetectable Integrity-Preserving Attack Against LLM Watermarking** Ziyang You, Huilong He, Xiaoke Yang et al. | arXiv · cs.CR **2026** | <img width="400" alt="Blind PRNG Hijacking: An Undetectable Integrity-Preserving Attack Against LLM Watermarking" src="https://arxiv.org/html/2605.28632v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.28632) [PDF](https://arxiv.org/pdf/2605.28632) `2605.28632` |
| **SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness** Jiahao Huo, Wenjie Qu, Yibo Yan et al. | arXiv · cs.CR **2026** | <img width="400" alt="SAMark: A Self-Anchored Text Watermarking with Paragraph-Level Paraphrase Robustness" src="https://arxiv.org/html/2605.25796v3/figures/samark_fig1_v3.jpg"> | [Paper](https://arxiv.org/abs/2605.25796) [PDF](https://arxiv.org/pdf/2605.25796) `2605.25796` |
| **Robust LLM Watermarking with Minimal Semantic Distortion for IP Protection** Kieu Dang, Phung Lai, NhatHai Phan et al. | arXiv · cs.CR **2026** | — | [Paper](https://arxiv.org/abs/2605.23175) [PDF](https://arxiv.org/pdf/2605.23175) `2605.23175` |
| **Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Texts** Melanie Rieff, Robin Staab, Thibaud Gloaguen et al. | arXiv · cs.AI **2026** | <img width="400" alt="Marking the Wrong Symptoms: Evaluating LLM Watermarks in Medical Texts" src="https://arxiv.org/html/2607.20462/2607.20462v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.20462) [PDF](https://arxiv.org/pdf/2607.20462) `2607.20462` |
| **Covert Multi-bit LLM Watermarking: An Information Theory and Coding Approach** Sidong Guo, Tyler Kann, Teodora Baluta et al. | arXiv · cs.IT **2026** | <img width="400" alt="Covert Multi-bit LLM Watermarking: An Information Theory and Coding Approach" src="https://arxiv.org/html/2605.16709v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.16709) [PDF](https://arxiv.org/pdf/2605.16709) `2605.16709` |
| **TextSeal: A Localized LLM Watermark for Provenance & Distillation Protection** Tom Sander, Hongyan Chang, Tomáš Souček et al. | arXiv · cs.CR **2026** | <img width="400" alt="TextSeal: A Localized LLM Watermark for Provenance &amp; Distillation Protection" src="https://arxiv.org/html/2605.12456v2/x1.png"> | [Paper](https://arxiv.org/abs/2605.12456) [PDF](https://arxiv.org/pdf/2605.12456) `2605.12456` |
| **Every Bit, Everywhere, All at Once: A Binomial Multibit LLM Watermark** Thibaud Gloaguen, Robin Staab, Mark Vero et al. | arXiv · cs.CR **2026** | <img width="400" alt="Every Bit, Everywhere, All at Once: A Binomial Multibit LLM Watermark" src="https://arxiv.org/html/2605.11653v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.11653) [PDF](https://arxiv.org/pdf/2605.11653) `2605.11653` |
| **Making Open-Source Text LLM Watermarks Durable Against Merging** Luisa Scharff, Thibaud Gloaguen, Robin Staab et al. | arXiv · cs.CL **2026** | <img width="400" alt="Making Open-Source Text LLM Watermarks Durable Against Merging" src="https://arxiv.org/html/2607.20435/2607.20435v1/x1.png"> | [Paper](https://arxiv.org/abs/2607.20435) [PDF](https://arxiv.org/pdf/2607.20435) `2607.20435` |
| **Sequential Behavioral Watermarking for LLM Agents** Hyeseon An, Shinwoo Park, Dongsu Kim et al. | arXiv · cs.CR **2026** | <img width="400" alt="Sequential Behavioral Watermarking for LLM Agents" src="https://arxiv.org/html/2605.11036v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.11036) [PDF](https://arxiv.org/pdf/2605.11036) `2605.11036` |
| **Vaporizer: Breaking Watermarking Schemes for Large Language Model Outputs** Jonathan Hong Jin Ng, Anh Tu Ngo, Anupam Chattopadhyay | arXiv · cs.CR **2026** | <img width="400" alt="Vaporizer: Breaking Watermarking Schemes for Large Language Model Outputs" src="https://arxiv.org/html/2605.07481v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.07481) [PDF](https://arxiv.org/pdf/2605.07481) `2605.07481` |
| **Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks** Mohd Ruhul Ameen, Akif Islam, Nadim Mahmud et al. | arXiv · cs.CL **2026** | <img width="400" alt="Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks" src="https://arxiv.org/html/2605.05503v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.05503) [PDF](https://arxiv.org/pdf/2605.05503) `2605.05503` |
| **SLAM: Structural Linguistic Activation Marking for Language Models** Fabrice Harel-Canada, Amit Sahai | arXiv · cs.CL **2026** | <img width="400" alt="SLAM: Structural Linguistic Activation Marking for Language Models" src="https://arxiv.org/html/2605.05443v2/x1.png"> | [Paper](https://arxiv.org/abs/2605.05443) [PDF](https://arxiv.org/pdf/2605.05443) `2605.05443` |
| **SWAN: Semantic Watermarking with Abstract Meaning Representation** Ziping Ye, Gourab Dey, Christos Christodoulopoulos et al. | ACL 2026 Main **2026** | <img width="400" alt="SWAN: Semantic Watermarking with Abstract Meaning Representation" src="https://arxiv.org/html/2605.04305v1/figures/amr_example.png"> | [Paper](https://arxiv.org/abs/2605.04305) [PDF](https://arxiv.org/pdf/2605.04305) `2605.04305` |
| **LLM Output Detectability and Task Performance Can be Jointly Optimized** Koshiro Saito, Ryuto Koike, Masahiro Kaneko et al. | arXiv · cs.CL **2026** | — | [Paper](https://arxiv.org/abs/2605.01350) [PDF](https://arxiv.org/pdf/2605.01350) `2605.01350` |
| **Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking** Joeun Kim, HoEun Kim, Dongsup Jin et al. | ICML 2026 **2026** | <img width="400" alt="Block-wise Codeword Embedding for Reliable Multi-bit Text Watermarking" src="https://arxiv.org/html/2605.00348v2/x1.png"> | [Paper](https://arxiv.org/abs/2605.00348) [PDF](https://arxiv.org/pdf/2605.00348) `2605.00348` |
| **VOW: Verifiable and Oblivious Watermark Detection for Large Language Models** Xiaokun Luan, Yihao Zhang, Pengcheng Su et al. | arXiv · cs.CR **2026** | <img width="400" alt="VOW: Verifiable and Oblivious Watermark Detection for Large Language Models" src="https://arxiv.org/html/2604.27666v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.27666) [PDF](https://arxiv.org/pdf/2604.27666) `2604.27666` |
| **SSG: Logit-Balanced Vocabulary Partitioning for LLM Watermarking** Chenxi Gu, Xiaoning Du, John Grundy | arXiv · cs.CR **2026** | <img width="400" alt="SSG: Logit-Balanced Vocabulary Partitioning for LLM Watermarking" src="https://arxiv.org/html/2604.22438v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.22438) [PDF](https://arxiv.org/pdf/2604.22438) `2604.22438` |
| **SIF: Semantically In-Distribution Fingerprints for Large Vision-Language Models** Yifei Zhao, Qian Lou, Mengxin Zheng | CVPR 2026 **2026** | <img width="400" alt="SIF: Semantically In-Distribution Fingerprints for Large Vision-Language Models" src="https://arxiv.org/html/2604.17041v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.17041) [PDF](https://arxiv.org/pdf/2604.17041) `2604.17041` |
| **RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience** Hanbo Huang, Xuan Gong, Yiran Zhang et al. | arXiv · cs.CR **2026** | <img width="400" alt="RLSpoofer: A Lightweight Evaluator for LLM Watermark Spoofing Resilience" src="https://arxiv.org/html/2604.11546v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.11546) [PDF](https://arxiv.org/pdf/2604.11546) `2604.11546` |
| **Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models** Shuhao Zhang, Yuli Chen, Jiale Han et al. | arXiv · cs.CR **2026** | <img width="400" alt="Beyond A Fixed Seal: Adaptive Stealing Watermark in Large Language Models" src="https://arxiv.org/html/2604.10893v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.10893) [PDF](https://arxiv.org/pdf/2604.10893) `2604.10893` |
| **XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts** Jiahao Xu, Rui Hu, Olivera Kotevska et al. | arXiv · cs.CL **2026** | <img width="400" alt="XMark: Reliable Multi-Bit Watermarking for LLM-Generated Texts" src="https://arxiv.org/html/2604.05242v2/x1.png"> | [Paper](https://arxiv.org/abs/2604.05242) [PDF](https://arxiv.org/pdf/2604.05242) `2604.05242` |
| **Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Framework** Zhuoshang Wang, Yubing Ren, Yanan Cao et al. | ACL 2026 Findings **2026** | <img width="400" alt="Rethinking LLM Watermark Detection in Black-Box Settings: A Non-Intrusive Third-Party Framework" src="https://arxiv.org/html/2603.14968v2/x1.png"> | [Paper](https://arxiv.org/abs/2603.14968) [PDF](https://arxiv.org/pdf/2603.14968) `2603.14968` |
| **On Google's SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validation** Romina Omidi, Yun Dong, Binghui Wang | arXiv · cs.CR **2026** | <img width="400" alt="On Google&#x27;s SynthID-Text LLM Watermarking System: Theoretical Analysis and Empirical Validation" src="https://arxiv.org/html/2603.03410v2/x1.png"> | [Paper](https://arxiv.org/abs/2603.03410) [PDF](https://arxiv.org/pdf/2603.03410) `2603.03410` |
| **Online LLM watermark detection via e-processes** Weijie Su, Ruodu Wang, Zinan Zhao | arXiv · stat.ME **2026** | <img width="400" alt="Online LLM watermark detection via e-processes" src="https://arxiv.org/html/2602.14286v4/x1.png"> | [Paper](https://arxiv.org/abs/2602.14286) [PDF](https://arxiv.org/pdf/2602.14286) `2602.14286` |
| **Overview of PAN 2026: Voight-Kampff Generative AI Detection, Text Watermarking, Multi-Author Writing Style Analysis, Generative Plagiarism Detection, and Reasoning Trajectory Detection** Janek Bevendorff, Maik Fröbe, André Greiner-Petter et al. | arXiv · cs.CL **2026** | — | [Paper](https://arxiv.org/abs/2602.09147) [PDF](https://arxiv.org/pdf/2602.09147) `2602.09147` |
| **On Protecting Agentic Systems' Intellectual Property via Watermarking** Liwen Wang, Zongjie Li, Yuchong Xie et al. | arXiv · cs.AI **2026** | <img width="400" alt="On Protecting Agentic Systems&#x27; Intellectual Property via Watermarking" src="https://arxiv.org/html/2602.08401/x1.png"> | [Paper](https://arxiv.org/abs/2602.08401) [PDF](https://arxiv.org/pdf/2602.08401) `2602.08401` |
| **ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport** Atefeh Gilani, Sajani Vithana, Carol Xuan Long et al. | arXiv · cs.LG **2026** | <img width="400" alt="ArcMark: Distortion-Free Multi-Byte LLM Watermark via Optimal Transport" src="https://arxiv.org/html/2602.07235v2/nfig/llama3_300_tokens_message_accuracy_vs_bytes.png"> | [Paper](https://arxiv.org/abs/2602.07235) [PDF](https://arxiv.org/pdf/2602.07235) `2602.07235` |
| **A Unified Framework for LLM Watermarks** Thibaud Gloaguen, Robin Staab, Nikola Jovanović et al. | arXiv · cs.CR **2026** | <img width="400" alt="A Unified Framework for LLM Watermarks" src="https://arxiv.org/html/2602.06754/x1.png"> | [Paper](https://arxiv.org/abs/2602.06754) [PDF](https://arxiv.org/pdf/2602.06754) `2602.06754` |
| **WorldCup Sampling for Multi-bit LLM Watermarking** Yidan Wang, Yubing Ren, Yanan Cao et al. | arXiv · cs.CL **2026** | <img width="400" alt="WorldCup Sampling for Multi-bit LLM Watermarking" src="https://arxiv.org/html/2602.01752v2/x1.png"> | [Paper](https://arxiv.org/abs/2602.01752) [PDF](https://arxiv.org/pdf/2602.01752) `2602.01752` |
| **MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking** Ya Jiang, Massieh Kordi Boroujeny, Surender Suresh Kumar et al. | arXiv · cs.CR **2026** | <img width="400" alt="MirrorMark: Generalizable Mirrored Sampling for Multi-bit LLM Watermarking" src="https://arxiv.org/html/2601.22246v3/figs/CABS.png"> | [Paper](https://arxiv.org/abs/2601.22246) [PDF](https://arxiv.org/pdf/2601.22246) `2601.22246` |
| **Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs** Nghia T. Le, Alan Ritter, Kartik Goyal | arXiv · cs.CR **2026** | <img width="400" alt="Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs" src="https://arxiv.org/html/2601.11629/x1.png"> | [Paper](https://arxiv.org/abs/2601.11629) [PDF](https://arxiv.org/pdf/2601.11629) `2601.11629` |
| **BanglaLorica: Design and Evaluation of a Robust Watermarking Algorithm for Large Language Models in Bangla Text Generation** Amit Bin Tariqul, A N M Zahid Hossain Milkan, Sahab-Al-Chowdhury et al. | arXiv · cs.CL **2026** | <img width="400" alt="BanglaLorica: Design and Evaluation of a Robust Watermarking Algorithm for Large Language Models in Bangla Text Generation" src="https://arxiv.org/html/2601.04534/x1.png"> | [Paper](https://arxiv.org/abs/2601.04534) [PDF](https://arxiv.org/pdf/2601.04534) `2601.04534` |
| **How Good is Post-Hoc Watermarking With Language Model Rephrasing?** Pierre Fernandez, Tom Sander, Hady Elsahar et al. | arXiv · cs.CR **2025** | <img width="400" alt="How Good is Post-Hoc Watermarking With Language Model Rephrasing?" src="https://arxiv.org/html/2512.16904/x1.png"> | [Paper](https://arxiv.org/abs/2512.16904) [PDF](https://arxiv.org/pdf/2512.16904) `2512.16904` |
| **DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack** Hao Li, Yubing Ren, Yanan Cao et al. | ACL 2026 Findings **2026** | <img width="400" alt="DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack" src="https://arxiv.org/html/2512.16182v2/x1.png"> | [Paper](https://arxiv.org/abs/2512.16182) [PDF](https://arxiv.org/pdf/2512.16182) `2512.16182` |
| **Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models** Malte Hellmeier | arXiv · cs.CR **2025** | <img width="400" alt="Security and Detectability Analysis of Unicode Text Watermarking Methods against Large Language Models" src="https://arxiv.org/html/2512.13325/x1.png"> | [Paper](https://arxiv.org/abs/2512.13325) [PDF](https://arxiv.org/pdf/2512.13325) `2512.13325` |
| **Improved Pseudorandom Codes from Permuted Puzzles** Miranda Christ, Noah Golowich, Sam Gunn et al. | arXiv · cs.CR **2025** | — | [Paper](https://arxiv.org/abs/2512.08918) [PDF](https://arxiv.org/pdf/2512.08918) `2512.08918` |
| **MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking** Yizhou Zhao, Zhiwei Steven Wu, Adam Block | arXiv · cs.LG **2025** | <img width="400" alt="MarkTune: Improving the Quality-Detectability Trade-off in Open-Weight LLM Watermarking" src="https://arxiv.org/html/2512.04044/x1.png"> | [Paper](https://arxiv.org/abs/2512.04044) [PDF](https://arxiv.org/pdf/2512.04044) `2512.04044` |
| **WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking** Yukang Lin, Jiahao Shao, Shuoran Jiang et al. | arXiv · cs.CL **2025** | <img width="400" alt="WaterSearch: Exploring Seed Pooling for Improving the Quality-Detectability Trade-off in LLM Watermarking" src="https://arxiv.org/html/2512.00837v3/x1.png"> | [Paper](https://arxiv.org/abs/2512.00837) [PDF](https://arxiv.org/pdf/2512.00837) `2512.00837` |
| **WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarking** Shinwoo Park, Hyejin Park, Hyeseon Ahn et al. | arXiv · cs.AI **2025** | <img width="400" alt="WaterMod: Modular Token-Rank Partitioning for Probability-Balanced LLM Watermarking" src="https://arxiv.org/html/2511.07863/x1.png"> | [Paper](https://arxiv.org/abs/2511.07863) [PDF](https://arxiv.org/pdf/2511.07863) `2511.07863` |
| **Adaptive Testing for Segmenting Watermarked Texts From Language Models** Xingchi Li, Xiaochi Liu, Guanxun Li | arXiv · stat.ML **2025** | <img width="400" alt="Adaptive Testing for Segmenting Watermarked Texts From Language Models" src="https://arxiv.org/html/2511.06645/x1.png"> | [Paper](https://arxiv.org/abs/2511.06645) [PDF](https://arxiv.org/pdf/2511.06645) `2511.06645` |
| **Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology** Thomas Souverain | arXiv · cs.CR **2025** | <img width="400" alt="Watermarking Large Language Models in Europe: Interpreting the AI Act in Light of Technology" src="https://arxiv.org/html/2511.03641/schema_watermarking_during_inference_10_28.png"> | [Paper](https://arxiv.org/abs/2511.03641) [PDF](https://arxiv.org/pdf/2511.03641) `2511.03641` |
| **PVMark: Enabling Public Verifiability for LLM Watermarking Schemes** Haohua Duan, Liyao Xiang, Xin Zhang | arXiv · cs.CR **2025** | <img width="400" alt="PVMark: Enabling Public Verifiability for LLM Watermarking Schemes" src="https://arxiv.org/html/2510.26274/x1.png"> | [Paper](https://arxiv.org/abs/2510.26274) [PDF](https://arxiv.org/pdf/2510.26274) `2510.26274` |
| **PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs** Jiaqi Xue, Yifei Zhao, Mansour Al Ghanim et al. | arXiv · cs.CR **2025** | <img width="400" alt="PRO: Enabling Precise and Robust Text Watermark for Open-Source LLMs" src="https://arxiv.org/html/2510.23891/x1.png"> | [Paper](https://arxiv.org/abs/2510.23891) [PDF](https://arxiv.org/pdf/2510.23891) `2510.23891` |
| **Optimal Detection for Language Watermarks with Pseudorandom Collision** T. Tony Cai, Xiang Li, Qi Long et al. | arXiv · math.ST **2025** | <img width="400" alt="Optimal Detection for Language Watermarks with Pseudorandom Collision" src="https://arxiv.org/html/2510.22007/x1.png"> | [Paper](https://arxiv.org/abs/2510.22007) [PDF](https://arxiv.org/pdf/2510.22007) `2510.22007` |
| **A Reinforcement Learning Framework for Robust and Secure LLM Watermarking** Li An, Yujian Liu, Yepeng Liu et al. | arXiv · cs.CR **2025** | <img width="400" alt="A Reinforcement Learning Framework for Robust and Secure LLM Watermarking" src="https://arxiv.org/html/2510.21053/x1.png"> | [Paper](https://arxiv.org/abs/2510.21053) [PDF](https://arxiv.org/pdf/2510.21053) `2510.21053` |
| **Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption** Yepeng Liu, Xuandong Zhao, Dawn Song et al. | arXiv · cs.CR **2025** | <img width="400" alt="Position: LLM Watermarking Should Align Stakeholders&#x27; Incentives for Practical Adoption" src="https://arxiv.org/html/2510.18333v2/x1.png"> | [Paper](https://arxiv.org/abs/2510.18333) [PDF](https://arxiv.org/pdf/2510.18333) `2510.18333` |
| **Is Multilingual LLM Watermarking Truly Multilingual? Scaling Robustness to 100+ Languages via Back-Translation** Asim Mohamed, Martin Gubri | arXiv · cs.CL **2025** | — | [Paper](https://arxiv.org/abs/2510.18019) [PDF](https://arxiv.org/pdf/2510.18019) `2510.18019` |
| **Watermark Robustness and Radioactivity May Be at Odds in Federated Learning** Leixu Huang, Zedian Shao, Teodora Baluta | arXiv · cs.CR **2025** | <img width="400" alt="Watermark Robustness and Radioactivity May Be at Odds in Federated Learning" src="https://arxiv.org/html/2510.17033/x1.png"> | [Paper](https://arxiv.org/abs/2510.17033) [PDF](https://arxiv.org/pdf/2510.17033) `2510.17033` |
| **EditMark: Watermarking Large Language Models based on Model Editing** Shuai Li, Kejiang Chen, Jun Jiang et al. | arXiv · cs.CR **2025** | <img width="400" alt="EditMark: Watermarking Large Language Models based on Model Editing" src="https://arxiv.org/html/2510.16367/x1.png"> | [Paper](https://arxiv.org/abs/2510.16367) [PDF](https://arxiv.org/pdf/2510.16367) `2510.16367` |
| **DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillation** Hyeseon An, Shinwoo Park, Suyeon Woo et al. | EACL 2026 (Oral) **2026** | <img width="400" alt="DITTO: A Spoofing Attack Framework on Watermarked LLMs via Knowledge Distillation" src="https://arxiv.org/html/2510.10987/x1.png"> | [Paper](https://arxiv.org/abs/2510.10987) [PDF](https://arxiv.org/pdf/2510.10987) `2510.10987` |
| **A Linguistics-Aware LLM Watermarking via Syntactic Predictability** Shinwoo Park, Hyejin Park, Hyeseon An et al. | arXiv · cs.CL **2025** | <img width="400" alt="A Linguistics-Aware LLM Watermarking via Syntactic Predictability" src="https://arxiv.org/html/2510.13829v4/x1.png"> | [Paper](https://arxiv.org/abs/2510.13829) [PDF](https://arxiv.org/pdf/2510.13829) `2510.13829` |
| **On the Empirical Power of Goodness-of-Fit Tests in Watermark Detection** Weiqing He, Xiang Li, Tianqi Shang et al. | NeurIPS 2025 as a spotlight **2025** | <img width="400" alt="On the Empirical Power of Goodness-of-Fit Tests in Watermark Detection" src="https://arxiv.org/html/2510.03944/x1.png"> | [Paper](https://arxiv.org/abs/2510.03944) [PDF](https://arxiv.org/pdf/2510.03944) `2510.03944` |
| **PRIVMARK: Private Large Language Models Watermarking with MPC** Thomas Fargues, Ye Dong, Tianwei Zhang et al. | ICC 2026 **2026** | <img width="400" alt="PRIVMARK: Private Large Language Models Watermarking with MPC" src="https://arxiv.org/html/2509.24624/Figures/PostMark.png"> | [Paper](https://arxiv.org/abs/2509.24624) [PDF](https://arxiv.org/pdf/2509.24624) `2509.24624` |
| **Analyzing and Evaluating Unbiased Language Model Watermark** Yihan Wu, Xuehao Cui, Ruibo Chen et al. | arXiv · cs.CR **2025** | <img width="400" alt="Analyzing and Evaluating Unbiased Language Model Watermark" src="https://arxiv.org/html/2509.24048/figures/main_plot_MC.png"> | [Paper](https://arxiv.org/abs/2509.24048) [PDF](https://arxiv.org/pdf/2509.24048) `2509.24048` |
| **An Ensemble Framework for Unbiased Language Model Watermarking** Yihan Wu, Ruibo Chen, Georgios Milis et al. | arXiv · cs.CR **2025** | <img width="400" alt="An Ensemble Framework for Unbiased Language Model Watermarking" src="https://arxiv.org/html/2509.24043/x1.png"> | [Paper](https://arxiv.org/abs/2509.24043) [PDF](https://arxiv.org/pdf/2509.24043) `2509.24043` |
| **LLM Watermark Evasion via Bias Inversion** Jeongyeon Hwang, Sangdon Park, Jungseul Ok | arXiv · cs.CR **2025** | <img width="400" alt="LLM Watermark Evasion via Bias Inversion" src="https://arxiv.org/html/2509.23019v5/x1.png"> | [Paper](https://arxiv.org/abs/2509.23019) [PDF](https://arxiv.org/pdf/2509.23019) `2509.23019` |
| **Fast segmentation of watermarked texts from large language models through an epidemic change-point framework** Soham Bonnerjee, Subhrajyoty Roy, Sayar Karmakar | arXiv · stat.ML **2025** | — | [Paper](https://arxiv.org/abs/2509.21160) [PDF](https://arxiv.org/pdf/2509.21160) `2509.21160` |
| **RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks** Hanbo Huang, Yiran Zhang, Hao Zheng et al. | arXiv · cs.CR **2025** | <img width="400" alt="RLCracker: Evaluating the Worst-Case Vulnerability of LLM Watermarks with Adaptive RL Attacks" src="https://arxiv.org/html/2509.20924v2/x1.png"> | [Paper](https://arxiv.org/abs/2509.20924) [PDF](https://arxiv.org/pdf/2509.20924) `2509.20924` |
| **Character-Level Perturbations Disrupt LLM Watermarks** Zhaoxi Zhang, Xiaomei Zhang, Yanjun Zhang et al. | Network and Distributed System Security (NDSS) Symposium 2026 **2026** | — | [Paper](https://arxiv.org/abs/2509.09112) [PDF](https://arxiv.org/pdf/2509.09112) `2509.09112` |
| **Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts** Rochana Prih Hastuti, Rian Adam Rajagede, Mansour Al Ghanim et al. | EMNLP 2025 Findings **2025** | <img width="400" alt="Factuality Beyond Coherence: Evaluating LLM Watermarking Methods for Medical Texts" src="https://arxiv.org/html/2509.07755/images/Watermarking-benchmark.png"> | [Paper](https://arxiv.org/abs/2509.07755) [PDF](https://arxiv.org/pdf/2509.07755) `2509.07755` |
| **Robustness Assessment and Enhancement of Text Watermarking for Google's SynthID** Xia Han, Qi Li, Jianbing Ni et al. | arXiv · cs.CR **2025** | <img width="400" alt="Robustness Assessment and Enhancement of Text Watermarking for Google&#x27;s SynthID" src="https://arxiv.org/html/2508.20228/Synonym_Substitution_attack_for_SynthID-Text.png"> | [Paper](https://arxiv.org/abs/2508.20228) [PDF](https://arxiv.org/pdf/2508.20228) `2508.20228` |
| **Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends** Zhenhua Xu, Xubin Yue, Zhebo Wang et al. | arXiv · cs.CR **2025** | <img width="400" alt="Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends" src="https://arxiv.org/html/2508.11548v2/figures/text_watermark.png"> | [Paper](https://arxiv.org/abs/2508.11548) [PDF](https://arxiv.org/pdf/2508.11548) `2508.11548` |
| **SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders** Zhuohao Yu, Xingru Jiang, Weizheng Gu et al. | arXiv · cs.CL **2025** | <img width="400" alt="SAEMark: Steering Personalized Multilingual LLM Watermarks with Sparse Autoencoders" src="https://arxiv.org/html/2508.08211/x1.png"> | [Paper](https://arxiv.org/abs/2508.08211) [PDF](https://arxiv.org/pdf/2508.08211) `2508.08211` |
| **VLA-Mark: A cross modal watermark for large vision-language alignment model** Shuliang Liu, Qi Zheng, Jesse Jiaxi Xu et al. | arXiv · cs.CV **2025** | <img width="400" alt="VLA-Mark: A cross modal watermark for large vision-language alignment model" src="https://arxiv.org/html/2507.14067/x1.png"> | [Paper](https://arxiv.org/abs/2507.14067) [PDF](https://arxiv.org/pdf/2507.14067) `2507.14067` |
| **Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks** Huanming Shen, Baizhou Huang, Xiaojun Wan | arXiv · cs.CR **2025** | <img width="400" alt="Enhancing LLM Watermark Resilience Against Both Scrubbing and Spoofing Attacks" src="https://arxiv.org/html/2507.06274/figures/toutu.png"> | [Paper](https://arxiv.org/abs/2507.06274) [PDF](https://arxiv.org/pdf/2507.06274) `2507.06274` |
| **CoreMark: Toward Robust and Universal Text Watermarking Technique** Jiale Meng, Yiming Li, Zheming Lu et al. | arXiv · cs.CV **2025** | <img width="400" alt="CoreMark: Toward Robust and Universal Text Watermarking Technique" src="https://arxiv.org/html/2506.23066/x1.png"> | [Paper](https://arxiv.org/abs/2506.23066) [PDF](https://arxiv.org/pdf/2506.23066) `2506.23066` |
| **Optimal Estimation of Watermark Proportions in Hybrid AI-Human Texts** Xiang Li, Garrett Wen, Weiqing He et al. | arXiv · stat.ML **2025** | <img width="400" alt="Optimal Estimation of Watermark Proportions in Hybrid AI-Human Texts" src="https://arxiv.org/html/2506.22343/x1.png"> | [Paper](https://arxiv.org/abs/2506.22343) [PDF](https://arxiv.org/pdf/2506.22343) `2506.22343` |
| **BiMark: Unbiased Multilayer Watermarking for Large Language Models** Xiaoyan Feng, He Zhang, Yanjun Zhang et al. | arXiv · cs.CL **2025** | <img width="400" alt="BiMark: Unbiased Multilayer Watermarking for Large Language Models" src="https://arxiv.org/html/2506.21602/x1.png"> | [Paper](https://arxiv.org/abs/2506.21602) [PDF](https://arxiv.org/pdf/2506.21602) `2506.21602` |
| **Watermarking Autoregressive Image Generation** Nikola Jovanović, Ismail Labiad, Tomáš Souček et al. | arXiv · cs.LG **2025** | <img width="400" alt="Watermarking Autoregressive Image Generation" src="https://arxiv.org/html/2506.16349/x1.png"> | [Paper](https://arxiv.org/abs/2506.16349) [PDF](https://arxiv.org/pdf/2506.16349) `2506.16349` |
| **Multi-use LLM Watermarking and the False Detection Problem** Zihao Fu, Chris Russell | arXiv · cs.CR **2025** | <img width="400" alt="Multi-use LLM Watermarking and the False Detection Problem" src="https://arxiv.org/html/2506.15975/x1.png"> | [Paper](https://arxiv.org/abs/2506.15975) [PDF](https://arxiv.org/pdf/2506.15975) `2506.15975` |
| **LexiMark: Robust Watermarking via Lexical Substitutions to Enhance Membership Verification of an LLM's Textual Training Data** Eyal German, Sagiv Antebi, Edan Habler et al. | arXiv · cs.CL **2025** | <img width="400" alt="LexiMark: Robust Watermarking via Lexical Substitutions to Enhance Membership Verification of an LLM&#x27;s Textual Training Data" src="https://arxiv.org/html/2506.14474/x1.png"> | [Paper](https://arxiv.org/abs/2506.14474) [PDF](https://arxiv.org/pdf/2506.14474) `2506.14474` |
| **HeavyWater and SimplexWater: Distortion-Free LLM Watermarks for Low-Entropy Next-Token Predictions** Dor Tsur, Carol Xuan Long, Claudio Mayrink Verdun et al. | arXiv · cs.CR **2025** | — | [Paper](https://arxiv.org/abs/2506.06409) [PDF](https://arxiv.org/pdf/2506.06409) `2506.06409` |
| **StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models** Ya Jiang, Chuxiong Wu, Massieh Kordi Boroujeny et al. | arXiv · cs.CR **2025** | <img width="400" alt="StealthInk: A Multi-bit and Stealthy Watermark for Large Language Models" src="https://arxiv.org/html/2506.05502/extracted/6517012/figs/overview.png"> | [Paper](https://arxiv.org/abs/2506.05502) [PDF](https://arxiv.org/pdf/2506.05502) `2506.05502` |
| **Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking** Tianle Gu, Zongqi Wang, Kexin Huang et al. | arXiv · cs.CL **2025** | <img width="400" alt="Invisible Entropy: Towards Safe and Efficient Low-Entropy LLM Watermarking" src="https://arxiv.org/html/2505.14112/extracted/6457515/figs/hf-logo.png"> | [Paper](https://arxiv.org/abs/2505.14112) [PDF](https://arxiv.org/pdf/2505.14112) `2505.14112` |
| **Optimized Couplings for Watermarking Large Language Models** Dor Tsur, Carol Xuan Long, Claudio Mayrink Verdun et al. | ISIT25 **2025** | <img width="400" alt="Optimized Couplings for Watermarking Large Language Models" src="https://arxiv.org/html/2505.08878/x1.png"> | [Paper](https://arxiv.org/abs/2505.08878) [PDF](https://arxiv.org/pdf/2505.08878) `2505.08878` |
| **LLM-Text Watermarking based on Lagrange Interpolation** Jarosław Janas, Paweł Morawiecki, Josef Pieprzyk | arXiv · cs.CR **2025** | — | [Paper](https://arxiv.org/abs/2505.05712) [PDF](https://arxiv.org/pdf/2505.05712) `2505.05712` |
| **Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks** Yixin Cheng, Hongcheng Guo, Yangming Li et al. | arXiv · cs.LG **2025** | <img width="400" alt="Revealing Weaknesses in Text Watermarking Through Self-Information Rewrite Attacks" src="https://arxiv.org/html/2505.05190/x1.png"> | [Paper](https://arxiv.org/abs/2505.05190) [PDF](https://arxiv.org/pdf/2505.05190) `2505.05190` |
| **WaterDrum: Watermarking for Data-centric Unlearning Metric** Xinyang Lu, Xinyuan Niu, Gregory Kang Ruey Lau et al. | arXiv · cs.LG **2025** | <img width="400" alt="WaterDrum: Watermarking for Data-centric Unlearning Metric" src="https://arxiv.org/html/2505.05064/x1.png"> | [Paper](https://arxiv.org/abs/2505.05064) [PDF](https://arxiv.org/pdf/2505.05064) `2505.05064` |
| **An End-to-End Model for Logits-Based Large Language Models Watermarking** Kahim Wong, Jicheng Zhou, Jiantao Zhou et al. | arXiv · cs.CR **2025** | <img width="400" alt="An End-to-End Model for Logits-Based Large Language Models Watermarking" src="https://arxiv.org/html/2505.02344v3/img/model_overview.png"> | [Paper](https://arxiv.org/abs/2505.02344) [PDF](https://arxiv.org/pdf/2505.02344) `2505.02344` |
| **LLM Watermarking Using Mixtures and Statistical-to-Computational Gaps** Pedro Abdalla, Roman Vershynin | arXiv · cs.CR **2025** | — | [Paper](https://arxiv.org/abs/2505.01484) [PDF](https://arxiv.org/pdf/2505.01484) `2505.01484` |
| **Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation** Xin Yi, Yue Li, Shunfan Zheng et al. | arXiv · cs.CL **2025** | <img width="400" alt="Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation" src="https://arxiv.org/html/2504.17480/x1.png"> | [Paper](https://arxiv.org/abs/2504.17480) [PDF](https://arxiv.org/pdf/2504.17480) `2504.17480` |
| **Watermarking Needs Input Repetition Masking** David Khachaturov, Robert Mullins, Ilia Shumailov et al. | arXiv · cs.LG **2025** | <img width="400" alt="Watermarking Needs Input Repetition Masking" src="https://arxiv.org/html/2504.12229/x1.png"> | [Paper](https://arxiv.org/abs/2504.12229) [PDF](https://arxiv.org/pdf/2504.12229) `2504.12229` |
| **Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning** Li An, Yujian Liu, Yepeng Liu et al. | arXiv · cs.CR **2025** | <img width="400" alt="Defending LLM Watermarking Against Spoofing Attacks with Contrastive Representation Learning" src="https://arxiv.org/html/2504.06575/x1.png"> | [Paper](https://arxiv.org/abs/2504.06575) [PDF](https://arxiv.org/pdf/2504.06575) `2504.06575` |
| **Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models** Fay Elhassan, Niccolò Ajroldi, Antonio Orvieto et al. | arXiv · cs.LG **2025** | <img width="400" alt="Can you Finetune your Binoculars? Embedding Text Watermarks into the Weights of Large Language Models" src="https://arxiv.org/html/2504.06446/extracted/6345764/img/afte.jpeg"> | [Paper](https://arxiv.org/abs/2504.06446) [PDF](https://arxiv.org/pdf/2504.06446) `2504.06446` |
| **Agent Guide: A Simple Agent Behavioral Watermarking Framework** Kaibo Huang, Zipei Zhang, Zhongliang Yang et al. | arXiv · cs.AI **2025** | <img width="400" alt="Agent Guide: A Simple Agent Behavioral Watermarking Framework" src="https://arxiv.org/html/2504.05871v3/x1.png"> | [Paper](https://arxiv.org/abs/2504.05871) [PDF](https://arxiv.org/pdf/2504.05871) `2504.05871` |
| **FontGuard: A Robust Font Watermarking Approach Leveraging Deep Font Knowledge** Kahim Wong, Jicheng Zhou, Kemou Li et al. | arXiv · cs.CV **2025** | <img width="400" alt="FontGuard: A Robust Font Watermarking Approach Leveraging Deep Font Knowledge" src="https://arxiv.org/html/2504.03128/extracted/6335148/figure/watermark_process_general.png"> | [Paper](https://arxiv.org/abs/2504.03128) [PDF](https://arxiv.org/pdf/2504.03128) `2504.03128` |
| **RoSMM: A Robust and Secure Multi-Modal Watermarking Framework for Diffusion Models** ZhongLi Fang, Yu Xie, Ping Chen | arXiv · cs.MM **2025** | <img width="400" alt="RoSMM: A Robust and Secure Multi-Modal Watermarking Framework for Diffusion Models" src="https://arxiv.org/html/2504.02640/x1.png"> | [Paper](https://arxiv.org/abs/2504.02640) [PDF](https://arxiv.org/pdf/2504.02640) `2504.02640` |
| **Is Your Writing Being Mimicked by AI? Unveiling Imitation with Invisible Watermarks in Creative Writing** Ziwei Zhang, Juan Wen, Wanli Peng et al. | arXiv · cs.CR **2025** | <img width="400" alt="Is Your Writing Being Mimicked by AI? Unveiling Imitation with Invisible Watermarks in Creative Writing" src="https://arxiv.org/html/2504.00035/x1.png"> | [Paper](https://arxiv.org/abs/2504.00035) [PDF](https://arxiv.org/pdf/2504.00035) `2504.00035` |
| **CEFW: A Comprehensive Evaluation Framework for Watermark in Large Language Models** Shuhao Zhang, Bo Cheng, Jiale Han et al. | arXiv · cs.CR **2025** | <img width="400" alt="CEFW: A Comprehensive Evaluation Framework for Watermark in Large Language Models" src="https://arxiv.org/html/2503.20802/x1.png"> | [Paper](https://arxiv.org/abs/2503.20802) [PDF](https://arxiv.org/pdf/2503.20802) `2503.20802` |
| **Breaking Distortion-free Watermarks in Large Language Models** Shayleen Reynolds, Hengzhi He, Dung Daniel T. Ngo et al. | arXiv · cs.CR **2025** | <img width="400" alt="Breaking Distortion-free Watermarks in Large Language Models" src="https://arxiv.org/html/2502.18608/extracted/6537009/figures/fig_overview_1.png"> | [Paper](https://arxiv.org/abs/2502.18608) [PDF](https://arxiv.org/pdf/2502.18608) `2502.18608` |
| **Detecting Benchmark Contamination Through Watermarking** Tom Sander, Pierre Fernandez, Saeed Mahloujifar et al. | arXiv · cs.CR **2025** | <img width="400" alt="Detecting Benchmark Contamination Through Watermarking" src="https://arxiv.org/html/2502.17259/x1.png"> | [Paper](https://arxiv.org/abs/2502.17259) [PDF](https://arxiv.org/pdf/2502.17259) `2502.17259` |
| **Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulations** Mansour Al Ghanim, Jiaqi Xue, Rochana Prih Hastuti et al. | arXiv · cs.CL **2025** | <img width="400" alt="Evaluating the Robustness and Accuracy of Text Watermarking Under Real-World Cross-Lingual Manipulations" src="https://arxiv.org/html/2502.16699/x1.png"> | [Paper](https://arxiv.org/abs/2502.16699) [PDF](https://arxiv.org/pdf/2502.16699) `2502.16699` |

## Model Ownership and Fingerprinting

**103 papers · newest first**

| **Title & Authors** | **Venue/Year** | **Introduction** | **Links** |
|:---|:---:|:---|:---:|
| **Fingerprinting Text-to-Image Diffusion Models via Collapsed Generation** Yuanmin Huang, Chen Chen, Geng Hong et al. | arXiv · cs.CR **2026** | <img width="400" alt="Fingerprinting Text-to-Image Diffusion Models via Collapsed Generation" src="https://arxiv.org/html/2608.11732/2608.11732v1/intro.png"> | [Paper](https://arxiv.org/abs/2608.11732) [PDF](https://arxiv.org/pdf/2608.11732) `2608.11732` |
| **WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking** Song Xiao, Yuqi Yuan, Yanshuo Zhang et al. | arXiv · cs.CR **2026** | <img width="400" alt="WorldMark: A Plug-and-Play World Knowledge Interface for Cross-Host Language Model Watermarking" src="https://arxiv.org/html/2608.06416/2608.06416v1/x1.png"> | [Paper](https://arxiv.org/abs/2608.06416) [PDF](https://arxiv.org/pdf/2608.06416) `2608.06416` |
| **Synchronization-Free Algebraic Fingerprints for Large Language Models: From Autoregressive to Diffusion Models** Jaroslaw Janas, Josef Pieprzyk, Pawel Morawiecki | arXiv · cs.CR **2026** | — | [Paper](https://arxiv.org/abs/2607.16648) [PDF](https://arxiv.org/pdf/2607.16648) `2607.16648` |
| **modelDNA: Calibrated Lineage Verification and Merge Decomposition from Sampled Weight Fingerprints** Muhammad Awais Bin Adil, Saad Aamir | arXiv · cs.LG **2026** | — | [Paper](https://arxiv.org/abs/2607.10617) [PDF](https://arxiv.org/pdf/2607.10617) `2607.10617` |
| **Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies** Kiarash Ahi, Saeed Valizadeh | IEEE 6th Silicon Valley Cybersecurity Conference (SVCC), San Francisco, CA, USA, 2025, pp. 1-10 **2025** | <img width="400" alt="Large Language Models (LLMs) and Generative AI in Cybersecurity and Privacy: A Survey of Dual-Use Risks, AI-Generated Malware, Explainability, and Defensive Strategies" src="https://arxiv.org/html/2607.06963v1/figure1.png"> | [Paper](https://arxiv.org/abs/2607.06963) [PDF](https://arxiv.org/pdf/2607.06963) `2607.06963` |
| **Cyclic Denoising Reveals Ultrastable Memories in Diffusion Models** Rishabh Sharma, Stefano Martiniani | arXiv · cs.LG **2026** | <img width="400" alt="Cyclic Denoising Reveals Ultrastable Memories in Diffusion Models" src="https://arxiv.org/html/2606.24000v1/x1.png"> | [Paper](https://arxiv.org/abs/2606.24000) [PDF](https://arxiv.org/pdf/2606.24000) `2606.24000` |
| **What Your Model Threw Away and Why You'll Want It Back: Masking, Fingerprinting, and Privacy from Discarded Geometry** Zachary P. Bradshaw | arXiv · cs.LG **2026** | <img width="400" alt="What Your Model Threw Away and Why You&#x27;ll Want It Back: Masking, Fingerprinting, and Privacy from Discarded Geometry" src="https://arxiv.org/html/2607.13046v1/fig1_gradient_vs_brute.png"> | [Paper](https://arxiv.org/abs/2607.13046) [PDF](https://arxiv.org/pdf/2607.13046) `2607.13046` |
| **Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Models** Jianwei Fei, Yunshu Dai, Zhihua Xia et al. | arXiv · cs.CV **2026** | <img width="400" alt="Efficient, Robust, and Anti-Collusion Fingerprinting of Image Diffusion Models" src="https://arxiv.org/html/2606.12977v1/x1.png"> | [Paper](https://arxiv.org/abs/2606.12977) [PDF](https://arxiv.org/pdf/2606.12977) `2606.12977` |
| **T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking** Jian-Ping Mei, Weibin Zhang, Ao Yao et al. | ICASSP 2026 - 2026 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), Barcelona, Spain, 2026, pp. 13967-13971 **2026** | <img width="400" alt="T2S: A Rehearsal-Based Approach for Extraction-Resistant Model Watermarking" src="https://arxiv.org/html/2606.11698v1/figure/SSM.png"> | [Paper](https://arxiv.org/abs/2606.11698) [PDF](https://arxiv.org/pdf/2606.11698) `2606.11698` |
| **Characterizing Detectability in 3DGS Poisoning: A Stage-wise Benchmark** Quoc-Anh Bui-Huynh, Thanh Duc Ngo, Xue Geng et al. | arXiv · cs.CV **2026** | <img width="400" alt="Characterizing Detectability in 3DGS Poisoning: A Stage-wise Benchmark" src="https://arxiv.org/html/2606.03499v1/x1.png"> | [Paper](https://arxiv.org/abs/2606.03499) [PDF](https://arxiv.org/pdf/2606.03499) `2606.03499` |
| **Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing** Leyi Qi, Yiming Li, Siyuan Liang et al. | the International Conference on Machine Learning (ICML) 2026 **2026** | <img width="400" alt="Cert-LAS: Toward Certified Model Ownership Verification for Text-to-Image Diffusion Models via Layer-Adaptive Smoothing" src="https://arxiv.org/html/2605.29809v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.29809) [PDF](https://arxiv.org/pdf/2605.29809) `2605.29809` |
| **Findings of the Counter Turing Test: AI-Generated Image Detection** Rajarshi Roy, Nasrin Imanpour, Ashhar Aziz et al. | arXiv · cs.CV **2026** | <img width="400" alt="Findings of the Counter Turing Test: AI-Generated Image Detection" src="https://arxiv.org/html/2605.20787v3/x1.png"> | [Paper](https://arxiv.org/abs/2605.20787) [PDF](https://arxiv.org/pdf/2605.20787) `2605.20787` |
| **Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks** Mohd Ruhul Ameen, Akif Islam, Nadim Mahmud et al. | arXiv · cs.CL **2026** | <img width="400" alt="Chainwash: Multi-Step Rewriting Attacks on Diffusion Language Model Watermarks" src="https://arxiv.org/html/2605.05503v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.05503) [PDF](https://arxiv.org/pdf/2605.05503) `2605.05503` |
| **CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint** Jiewei Lai, Lan Zhang, Chen Tang et al. | arXiv · cs.CV **2026** | <img width="400" alt="CSGuard: Toward Forgery-Resistant Watermarking in Diffusion Models via Compressed Sensing Constraint" src="https://arxiv.org/html/2605.01479v1/x1.png"> | [Paper](https://arxiv.org/abs/2605.01479) [PDF](https://arxiv.org/pdf/2605.01479) `2605.01479` |
| **The Surprising Universality of LLM Outputs: A Real-Time Verification Primitive** Alex Bogdan, Adrian de Valois-Franklin | arXiv · cs.CR **2026** | <img width="400" alt="The Surprising Universality of LLM Outputs: A Real-Time Verification Primitive" src="https://arxiv.org/html/2604.25634v1/x1.png"> | [Paper](https://arxiv.org/abs/2604.25634) [PDF](https://arxiv.org/pdf/2604.25634) `2604.25634` |
| **AI Identification: An Integrated Framework for Sustainable Governance in Digital Enterprises** Di Kevin Gao, Jingdao Chen, Shahram Rahimi | arXiv · cs.CR **2026** | — | [Paper](https://arxiv.org/abs/2604.10473) [PDF](https://arxiv.org/pdf/2604.10473) `2604.10473` |
| **StoryScope: Investigating idiosyncrasies in AI fiction** Jenna Russell, Rishanth Rajendhran, Chau Minh Pham et al. | arXiv · cs.CL **2026** | — | [Paper](https://arxiv.org/abs/2604.03136) [PDF](https://arxiv.org/pdf/2604.03136) `2604.03136` |
| **Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication** Yi Zhang, Hongbo Huang, Liang-Jie Zhang | arXiv · cs.CV **2026** | <img width="400" alt="Gaussian Shannon: High-Precision Diffusion Model Watermarking Based on Communication" src="https://arxiv.org/html/2603.26167v2/x1.png"> | [Paper](https://arxiv.org/abs/2603.26167) [PDF](https://arxiv.org/pdf/2603.26167) `2603.26167` |
| **IrisFP: Adversarial-Example-based Model Fingerprinting with Enhanced Uniqueness and Robustness** Ziye Geng, Guang Yang, Yihang Chen et al. | CVPR 2026 **2026** | <img width="400" alt="IrisFP: Adversarial-Example-based Model Fingerprinting with Enhanced Uniqueness and Robustness" src="https://arxiv.org/html/2603.24996v2/x1.png"> | [Paper](https://arxiv.org/abs/2603.24996) [PDF](https://arxiv.org/pdf/2603.24996) `2603.24996` |
| **LiteGuard: Efficient Task-Agnostic Model Fingerprinting with Enhanced Generalization** Guang Yang, Ziye Geng, Yihang Chen et al. | arXiv · cs.CR **2026** | <img width="400" alt="LiteGuard: Efficient Task-Agnostic Model Fingerprinting with Enhanced Generalization" src="https://arxiv.org/html/2603.24982v1/x1.png"> | [Paper](https://arxiv.org/abs/2603.24982) [PDF](https://arxiv.org/pdf/2603.24982) `2603.24982` |
| **Functional Subspace Watermarking for Large Language Models** Zikang Ding, Junhao Li, Suling Wu et al. | arXiv · cs.CR **2026** | <img width="400" alt="Functional Subspace Watermarking for Large Language Models" src="https://arxiv.org/html/2603.18793v1/x1.png"> | [Paper](https://arxiv.org/abs/2603.18793) [PDF](https://arxiv.org/pdf/2603.18793) `2603.18793` |
| **Collaborative Threshold Watermarking** Tameem Bakr, Anish Ambreth, Nils Lukas | arXiv · cs.LG **2026** | — | [Paper](https://arxiv.org/abs/2602.10765) [PDF](https://arxiv.org/pdf/2602.10765) `2602.10765` |
| **Origin Lens: A Privacy-First Mobile Framework for Cryptographic Image Provenance and AI Detection** Alexander Loth, Dominique Conceicao Rosario, Peter Ebinger et al. | ACM TheWebConf '26 Companion **2026** | <img width="400" alt="Origin Lens: A Privacy-First Mobile Framework for Cryptographic Image Provenance and AI Detection" src="https://arxiv.org/html/2602.03423/Images/Dashboard.png"> | [Paper](https://arxiv.org/abs/2602.03423) [PDF](https://arxiv.org/pdf/2602.03423) `2602.03423` |
| **Lossless Copyright Protection via Intrinsic Model Fingerprinting** Lingxiao Chen, Liqin Wang, Wei Lu et al. | arXiv · cs.CR **2026** | <img width="400" alt="Lossless Copyright Protection via Intrinsic Model Fingerprinting" src="https://arxiv.org/html/2601.21252/x1.png"> | [Paper](https://arxiv.org/abs/2601.21252) [PDF](https://arxiv.org/pdf/2601.21252) `2601.21252` |
| **Learning to Watermark in the Latent Space of Generative Models** Sylvestre-Alvise Rebuffi, Tuan Tran, Valeriu Lacatusu et al. | arXiv · cs.CV **2026** | <img width="400" alt="Learning to Watermark in the Latent Space of Generative Models" src="https://arxiv.org/html/2601.16140/x1.png"> | [Paper](https://arxiv.org/abs/2601.16140) [PDF](https://arxiv.org/pdf/2601.16140) `2601.16140` |
| **Profiling German Text Simplification with Interpretable Model-Fingerprints** Lars Klöser, Mika Beele, Bodo Kraft | arXiv · cs.CL **2026** | <img width="400" alt="Profiling German Text Simplification with Interpretable Model-Fingerprints" src="https://arxiv.org/html/2601.13050/x1.png"> | [Paper](https://arxiv.org/abs/2601.13050) [PDF](https://arxiv.org/pdf/2601.13050) `2601.13050` |
| **KinGuard: Hierarchical Kinship-Aware Fingerprinting to Defend Against Large Language Model Stealing** Zhenhua Xu, Xiaoning Tian, Wenjun Zeng et al. | arXiv · cs.CR **2026** | <img width="400" alt="KinGuard: Hierarchical Kinship-Aware Fingerprinting to Defend Against Large Language Model Stealing" src="https://arxiv.org/html/2601.12986/figure_icassp/overview.png"> | [Paper](https://arxiv.org/abs/2601.12986) [PDF](https://arxiv.org/pdf/2601.12986) `2601.12986` |
| **Decoder Gradient Shields: A Family of Provable and High-Fidelity Methods Against Gradient-Based Box-Free Watermark Removal** Haonan An, Guang Hua, Wei Du et al. | arXiv · cs.CV **2026** | <img width="400" alt="Decoder Gradient Shields: A Family of Provable and High-Fidelity Methods Against Gradient-Based Box-Free Watermark Removal" src="https://arxiv.org/html/2601.11952/x1.png"> | [Paper](https://arxiv.org/abs/2601.11952) [PDF](https://arxiv.org/pdf/2601.11952) `2601.11952` |
| **Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs** Nghia T. Le, Alan Ritter, Kartik Goyal | arXiv · cs.CR **2026** | <img width="400" alt="Semantic Differentiation for Tackling Challenges in Watermarking Low-Entropy Constrained Generation Outputs" src="https://arxiv.org/html/2601.11629/x1.png"> | [Paper](https://arxiv.org/abs/2601.11629) [PDF](https://arxiv.org/pdf/2601.11629) `2601.11629` |
| **DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack** Hao Li, Yubing Ren, Yanan Cao et al. | ACL 2026 Findings **2026** | <img width="400" alt="DualGuard: Dual-stream Large Language Model Watermarking Defense against Paraphrase and Spoofing Attack" src="https://arxiv.org/html/2512.16182v2/x1.png"> | [Paper](https://arxiv.org/abs/2512.16182) [PDF](https://arxiv.org/pdf/2512.16182) `2512.16182` |
| **ComMark: Covert and Robust Black-Box Model Watermarking with Compressed Samples** Yunfei Yang, Xiaojun Chen, Zhendong Zhao et al. | arXiv · cs.CR **2025** | <img width="400" alt="ComMark: Covert and Robust Black-Box Model Watermarking with Compressed Samples" src="https://arxiv.org/html/2512.15641v2/x1.png"> | [Paper](https://arxiv.org/abs/2512.15641) [PDF](https://arxiv.org/pdf/2512.15641) `2512.15641` |
| **SPDMark: Selective Parameter Displacement for Robust Video Watermarking** Samar Fares, Nurbek Tastan, Karthik Nandakumar | arXiv · cs.CV **2025** | <img width="400" alt="SPDMark: Selective Parameter Displacement for Robust Video Watermarking" src="https://arxiv.org/html/2512.12090v2/x1.png"> | [Paper](https://arxiv.org/abs/2512.12090) [PDF](https://arxiv.org/pdf/2512.12090) `2512.12090` |
| **Smudged Fingerprints: A Systematic Evaluation of the Robustness of AI Image Fingerprints** Kai Yao, Marc Juarez | arXiv · cs.CV **2025** | <img width="400" alt="Smudged Fingerprints: A Systematic Evaluation of the Robustness of AI Image Fingerprints" src="https://arxiv.org/html/2512.11771/x1.png"> | [Paper](https://arxiv.org/abs/2512.11771) [PDF](https://arxiv.org/pdf/2512.11771) `2512.11771` |
| **SEAL: Subspace-Anchored Watermarks for LLM Ownership** Yanbo Dai, Zongjie Li, Zhenlan Ji et al. | arXiv · cs.CR **2025** | <img width="400" alt="SEAL: Subspace-Anchored Watermarks for LLM Ownership" src="https://arxiv.org/html/2511.11356/x1.png"> | [Paper](https://arxiv.org/abs/2511.11356) [PDF](https://arxiv.org/pdf/2511.11356) `2511.11356` |
| **DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks** Yunfei Yang, Xiaojun Chen, Yuexin Xuan et al. | arXiv · cs.CR **2025** | <img width="400" alt="DeepTracer: Tracing Stolen Model via Deep Coupled Watermarks" src="https://arxiv.org/html/2511.08985/x1.png"> | [Paper](https://arxiv.org/abs/2511.08985) [PDF](https://arxiv.org/pdf/2511.08985) `2511.08985` |
| **Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks** Yaxin Xiao, Qingqing Ye, Zi Liang et al. | arXiv · cs.CR **2025** | <img width="400" alt="Class-feature Watermark: A Resilient Black-box Watermark Against Model Extraction Attacks" src="https://arxiv.org/html/2511.07947/x1.png"> | [Paper](https://arxiv.org/abs/2511.07947) [PDF](https://arxiv.org/pdf/2511.07947) `2511.07947` |
| **Position: LLM Watermarking Should Align Stakeholders' Incentives for Practical Adoption** Yepeng Liu, Xuandong Zhao, Dawn Song et al. | arXiv · cs.CR **2025** | <img width="400" alt="Position: LLM Watermarking Should Align Stakeholders&#x27; Incentives for Practical Adoption" src="https://arxiv.org/html/2510.18333v2/x1.png"> | [Paper](https://arxiv.org/abs/2510.18333) [PDF](https://arxiv.org/pdf/2510.18333) `2510.18333` |
| **An Information Asymmetry Game for Trigger-based DNN Model Watermarking** Chaoyue Huang, Gejian Zhao, Hanzhou Wu et al. | IEEE International Symposium on Digital Forensics and Security (2026) **2026** | <img width="400" alt="An Information Asymmetry Game for Trigger-based DNN Model Watermarking" src="https://arxiv.org/html/2510.14218/orig_example.png"> | [Paper](https://arxiv.org/abs/2510.14218) [PDF](https://arxiv.org/pdf/2510.14218) `2510.14218` |
| **Every Language Model Has a Forgery-Resistant Signature** Matthew Finlayson, Xiang Ren, Swabha Swayamdipta | arXiv · cs.CR **2025** | <img width="400" alt="Every Language Model Has a Forgery-Resistant Signature" src="https://arxiv.org/html/2510.14086v2/x1.png"> | [Paper](https://arxiv.org/abs/2510.14086) [PDF](https://arxiv.org/pdf/2510.14086) `2510.14086` |
| **The Hidden DNA of LLM-Generated JavaScript: Structural Patterns Enable High-Accuracy Authorship Attribution** Norbert Tihanyi, Bilel Cherif, Richard A. Dubniczky et al. | arXiv · cs.CR **2025** | <img width="400" alt="The Hidden DNA of LLM-Generated JavaScript: Structural Patterns Enable High-Accuracy Authorship Attribution" src="https://arxiv.org/html/2510.10493/x1.png"> | [Paper](https://arxiv.org/abs/2510.10493) [PDF](https://arxiv.org/pdf/2510.10493) `2510.10493` |
| **Are Robust LLM Fingerprints Adversarially Robust?** Anshul Nasery, Edoardo Contente, Alkin Kaz et al. | arXiv · cs.CR **2025** | <img width="400" alt="Are Robust LLM Fingerprints Adversarially Robust?" src="https://arxiv.org/html/2509.26598/x1.png"> | [Paper](https://arxiv.org/abs/2509.26598) [PDF](https://arxiv.org/pdf/2509.26598) `2509.26598` |
| **PRIVMARK: Private Large Language Models Watermarking with MPC** Thomas Fargues, Ye Dong, Tianwei Zhang et al. | ICC 2026 **2026** | <img width="400" alt="PRIVMARK: Private Large Language Models Watermarking with MPC" src="https://arxiv.org/html/2509.24624/Figures/PostMark.png"> | [Paper](https://arxiv.org/abs/2509.24624) [PDF](https://arxiv.org/pdf/2509.24624) `2509.24624` |
| **Analyzing and Evaluating Unbiased Language Model Watermark** Yihan Wu, Xuehao Cui, Ruibo Chen et al. | arXiv · cs.CR **2025** | <img width="400" alt="Analyzing and Evaluating Unbiased Language Model Watermark" src="https://arxiv.org/html/2509.24048/figures/main_plot_MC.png"> | [Paper](https://arxiv.org/abs/2509.24048) [PDF](https://arxiv.org/pdf/2509.24048) `2509.24048` |
| **An Ensemble Framework for Unbiased Language Model Watermarking** Yihan Wu, Ruibo Chen, Georgios Milis et al. | arXiv · cs.CR **2025** | <img width="400" alt="An Ensemble Framework for Unbiased Language Model Watermarking" src="https://arxiv.org/html/2509.24043/x1.png"> | [Paper](https://arxiv.org/abs/2509.24043) [PDF](https://arxiv.org/pdf/2509.24043) `2509.24043` |
| **Zero-Shot Visual Deepfake Detection: Can AI Predict and Prevent Fake Content Before It's Created?** Ayan Sar, Sampurna Roy, Tanupriya Choudhury et al. | Foundations and Trends in Signal Processing (2025) **2025** | <img width="400" alt="Zero-Shot Visual Deepfake Detection: Can AI Predict and Prevent Fake Content Before It&#x27;s Created?" src="https://arxiv.org/html/2509.18461/Figures/DeepfakeGeneration+Detection.jpg"> | [Paper](https://arxiv.org/abs/2509.18461) [PDF](https://arxiv.org/pdf/2509.18461) `2509.18461` |
| **Causal Fingerprints of AI Generative Models** Hui Xu, Chi Liu, Congcong Zhu et al. | arXiv · cs.CV **2025** | <img width="400" alt="Causal Fingerprints of AI Generative Models" src="https://arxiv.org/html/2509.15406v2/x1.png"> | [Paper](https://arxiv.org/abs/2509.15406) [PDF](https://arxiv.org/pdf/2509.15406) `2509.15406` |
| **Poison to Detect: Detection of Targeted Overfitting in Federated Learning** Soumia Zohra El Mestari, Maciej Krzysztof Zuziak, Gabriele Lenzini | Proceedings on Privacy Enhancing Technologies 2026(4), 480-506 **2026** | <img width="400" alt="Poison to Detect: Detection of Targeted Overfitting in Federated Learning" src="https://arxiv.org/html/2509.11974v2/images/Targeted_Overfitting_Diagram.png"> | [Paper](https://arxiv.org/abs/2509.11974) [PDF](https://arxiv.org/pdf/2509.11974) `2509.11974` |
| **CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor** Zhenhua Xu, Xixiang Zhao, Xubin Yue et al. | arXiv · cs.CL **2025** | <img width="400" alt="CTCC: A Robust and Stealthy Fingerprinting Framework for Large Language Models via Cross-Turn Contextual Correlation Backdoor" src="https://arxiv.org/html/2509.09703/latex/figures/teaser.png"> | [Paper](https://arxiv.org/abs/2509.09703) [PDF](https://arxiv.org/pdf/2509.09703) `2509.09703` |
| **From Construction to Injection: Edit-Based Fingerprints for Large Language Models** Yue Li, Xin Yi, Dongsheng Shi et al. | arXiv · cs.CL **2025** | <img width="400" alt="From Construction to Injection: Edit-Based Fingerprints for Large Language Models" src="https://arxiv.org/html/2509.03122v4/x1.png"> | [Paper](https://arxiv.org/abs/2509.03122) [PDF](https://arxiv.org/pdf/2509.03122) `2509.03122` |
| **Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends** Zhenhua Xu, Xubin Yue, Zhebo Wang et al. | arXiv · cs.CR **2025** | <img width="400" alt="Copyright Protection for Large Language Models: A Survey of Methods, Challenges, and Trends" src="https://arxiv.org/html/2508.11548v2/figures/text_watermark.png"> | [Paper](https://arxiv.org/abs/2508.11548) [PDF](https://arxiv.org/pdf/2508.11548) `2508.11548` |
| **NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling** Haonan An, Qianyao Ren, Guang Hua et al. | arXiv · cs.CR **2025** | <img width="400" alt="NWaaS: A Non-Intrusive and Privacy-Preserving Watermarking-as-a-Service System with Adaptive Resource Scheduling" src="https://arxiv.org/html/2507.18036/2507.18036v2/x1.png"> | [Paper](https://arxiv.org/abs/2507.18036) [PDF](https://arxiv.org/pdf/2507.18036) `2507.18036` |
| **Removing Box-Free Watermarks for Image-to-Image Models via Query-Based Reverse Engineering** Haonan An, Guang Hua, Hangcheng Cao et al. | arXiv · cs.CR **2025** | <img width="400" alt="Removing Box-Free Watermarks for Image-to-Image Models via Query-Based Reverse Engineering" src="https://arxiv.org/html/2507.18034/x1.png"> | [Paper](https://arxiv.org/abs/2507.18034) [PDF](https://arxiv.org/pdf/2507.18034) `2507.18034` |
| **Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking** Yuan Yao, Jin Song, Jian Jin | arXiv · cs.CR **2025** | <img width="400" alt="Hashed Watermark as a Filter: Defeating Forging and Overwriting Attacks in Weight-based Neural Network Watermarking" src="https://arxiv.org/html/2507.11137/x1.png"> | [Paper](https://arxiv.org/abs/2507.11137) [PDF](https://arxiv.org/pdf/2507.11137) `2507.11137` |
| **Disappearing Ink: Obfuscation Breaks N-gram Code Watermarks in Theory and Practice** Gehao Zhang, Eugene Bagdasarian, Juan Zhai et al. | arXiv · cs.CR **2025** | <img width="400" alt="Disappearing Ink: Obfuscation Breaks N-gram Code Watermarks in Theory and Practice" src="https://arxiv.org/html/2507.05512/x1.png"> | [Paper](https://arxiv.org/abs/2507.05512) [PDF](https://arxiv.org/pdf/2507.05512) `2507.05512` |
| **PPFL-RDSN: Privacy-Preserving Federated Learning-based Residual Dense Spatial Networks for Encrypted Lossy Image Reconstruction** Peilin He, James Joshi | 2025 IEEE 7th International Conference on Trust, Privacy and Security in Intelligent Systems, and Applications (TPS-ISA), pp. 21-31, 2025 **2025** | <img width="400" alt="PPFL-RDSN: Privacy-Preserving Federated Learning-based Residual Dense Spatial Networks for Encrypted Lossy Image Reconstruction" src="https://arxiv.org/html/2507.00230/imgs/orcid.png"> | [Paper](https://arxiv.org/abs/2507.00230) [PDF](https://arxiv.org/pdf/2507.00230) `2507.00230` |
| **Radioactive Watermarks in Diffusion and Autoregressive Image Generative Models** Michel Meintz, Jan Dubiński, Franziska Boenisch et al. | arXiv · cs.LG **2025** | <img width="400" alt="Radioactive Watermarks in Diffusion and Autoregressive Image Generative Models" src="https://arxiv.org/html/2506.23731/x1.png"> | [Paper](https://arxiv.org/abs/2506.23731) [PDF](https://arxiv.org/pdf/2506.23731) `2506.23731` |
| **Riemannian-Geometric Fingerprints of Generative Models** Hae Jin Song, Laurent Itti | arXiv · cs.LG **2025** | — | [Paper](https://arxiv.org/abs/2506.22802) [PDF](https://arxiv.org/pdf/2506.22802) `2506.22802` |
| **Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features** Linghui Zhu, Yiming Li, Haiqin Weng et al. | arXiv · cs.CV **2025** | <img width="400" alt="Holmes: Towards Effective and Harmless Model Ownership Verification to Personalized Large Vision Models via Decoupling Common Features" src="https://arxiv.org/html/2507.00724/x1.png"> | [Paper](https://arxiv.org/abs/2507.00724) [PDF](https://arxiv.org/pdf/2507.00724) `2507.00724` |
| **Watermarking Autoregressive Image Generation** Nikola Jovanović, Ismail Labiad, Tomáš Souček et al. | arXiv · cs.LG **2025** | <img width="400" alt="Watermarking Autoregressive Image Generation" src="https://arxiv.org/html/2506.16349/x1.png"> | [Paper](https://arxiv.org/abs/2506.16349) [PDF](https://arxiv.org/pdf/2506.16349) `2506.16349` |
| **Gradient-Based Model Fingerprinting for LLM Similarity Detection and Family Classification** Zehao Wu, Yanjie Zhao, Haoyu Wang | arXiv · cs.LG **2025** | <img width="400" alt="Gradient-Based Model Fingerprinting for LLM Similarity Detection and Family Classification" src="https://arxiv.org/html/2506.01631/x1.png"> | [Paper](https://arxiv.org/abs/2506.01631) [PDF](https://arxiv.org/pdf/2506.01631) `2506.01631` |
| **CHIP: Chameleon Hash-based Irreversible Passport for Robust Deep Model Ownership Verification and Active Usage Control** Chaohui Xu, Qi Cui, Chip-Hong Chang | arXiv · cs.CR **2025** | <img width="400" alt="CHIP: Chameleon Hash-based Irreversible Passport for Robust Deep Model Ownership Verification and Active Usage Control" src="https://arxiv.org/html/2505.24536/extracted/6497020/figs/passport_layer/conv_norm.png"> | [Paper](https://arxiv.org/abs/2505.24536) [PDF](https://arxiv.org/pdf/2505.24536) `2505.24536` |
| **MUSE: Model-Agnostic Tabular Watermarking via Multi-Sample Selection** Liancheng Fang, Aiwei Liu, Henry Peng Zou et al. | arXiv · cs.CR **2025** | <img width="400" alt="MUSE: Model-Agnostic Tabular Watermarking via Multi-Sample Selection" src="https://arxiv.org/html/2505.24267/x1.png"> | [Paper](https://arxiv.org/abs/2505.24267) [PDF](https://arxiv.org/pdf/2505.24267) `2505.24267` |
| **RAFP: Identifying LLM Lineages via Rare-Region Fingerprints** Yun-Yun Tsai, Jia Hao Liang, Chuan Guo et al. | arXiv · cs.LG **2025** | <img width="400" alt="RAFP: Identifying LLM Lineages via Rare-Region Fingerprints" src="https://arxiv.org/html/2505.12682v2/figs/rofl-v3.png"> | [Paper](https://arxiv.org/abs/2505.12682) [PDF](https://arxiv.org/pdf/2505.12682) `2505.12682` |
| **An End-to-End Model for Logits-Based Large Language Models Watermarking** Kahim Wong, Jicheng Zhou, Jiantao Zhou et al. | arXiv · cs.CR **2025** | <img width="400" alt="An End-to-End Model for Logits-Based Large Language Models Watermarking" src="https://arxiv.org/html/2505.02344v3/img/model_overview.png"> | [Paper](https://arxiv.org/abs/2505.02344) [PDF](https://arxiv.org/pdf/2505.02344) `2505.02344` |
| **Towards the Resistance of Neural Network Watermarking to Fine-tuning** Ling Tang, Yuefeng Chen, Hui Xue et al. | arXiv · cs.LG **2025** | <img width="400" alt="Towards the Resistance of Neural Network Watermarking to Fine-tuning" src="https://arxiv.org/html/2505.01007/x1.png"> | [Paper](https://arxiv.org/abs/2505.01007) [PDF](https://arxiv.org/pdf/2505.01007) `2505.01007` |
| **Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation** Xin Yi, Yue Li, Shunfan Zheng et al. | arXiv · cs.CL **2025** | <img width="400" alt="Unified attacks to large language model watermarks: spoofing and scrubbing in unauthorized knowledge distillation" src="https://arxiv.org/html/2504.17480/x1.png"> | [Paper](https://arxiv.org/abs/2504.17480) [PDF](https://arxiv.org/pdf/2504.17480) `2504.17480` |
| **Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models** Zijin Yang, Xin Zhang, Kejiang Chen et al. | arXiv · cs.CV **2025** | <img width="400" alt="Gaussian Shading++: Rethinking the Realistic Deployment Challenge of Performance-Lossless Image Watermark for Diffusion Models" src="https://arxiv.org/html/2504.15026/x1.png"> | [Paper](https://arxiv.org/abs/2504.15026) [PDF](https://arxiv.org/pdf/2504.15026) `2504.15026` |
| **ImF: Implicit Fingerprint for Large Language Models** Jiaxuan Wu, Wanli Peng, Hang Fu et al. | arXiv · cs.CL **2025** | <img width="400" alt="ImF: Implicit Fingerprint for Large Language Models" src="https://arxiv.org/html/2503.21805/x1.png"> | [Paper](https://arxiv.org/abs/2503.21805) [PDF](https://arxiv.org/pdf/2503.21805) `2503.21805` |
| **Disrupting Model Merging: A Parameter-Level Defense Without Sacrificing Accuracy** Wei Junhao, Yu Zhe, Sakuma Jun | arXiv · cs.LG **2025** | <img width="400" alt="Disrupting Model Merging: A Parameter-Level Defense Without Sacrificing Accuracy" src="https://arxiv.org/html/2503.07661/extracted/6580624/figs/story_illustration.png"> | [Paper](https://arxiv.org/abs/2503.07661) [PDF](https://arxiv.org/pdf/2503.07661) `2503.07661` |
| **Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal** Haonan An, Guang Hua, Zhengru Fang et al. | arXiv · cs.CV **2025** | <img width="400" alt="Decoder Gradient Shield: Provable and High-Fidelity Prevention of Gradient-Based Box-Free Watermark Removal" src="https://arxiv.org/html/2502.20924/x1.png"> | [Paper](https://arxiv.org/abs/2502.20924) [PDF](https://arxiv.org/pdf/2502.20924) `2502.20924` |
| **Ten Challenging Problems in Federated Foundation Models** Tao Fan, Hanlin Gu, Xuemei Cao et al. | arXiv · cs.LG **2025** | <img width="400" alt="Ten Challenging Problems in Federated Foundation Models" src="https://arxiv.org/html/2502.12176/x1.png"> | [Paper](https://arxiv.org/abs/2502.12176) [PDF](https://arxiv.org/pdf/2502.12176) `2502.12176` |
| **Dynamic watermarks in images generated by diffusion models** Yunzhuo Chen, Naveed Akhtar, Nur Al Hasan Haldar et al. | arXiv · cs.CV **2025** | <img width="400" alt="Dynamic watermarks in images generated by diffusion models" src="https://arxiv.org/html/2502.08927/watermark_embedding_flowchart.png"> | [Paper](https://arxiv.org/abs/2502.08927) [PDF](https://arxiv.org/pdf/2502.08927) `2502.08927` |
| **Image Watermarking of Generative Diffusion Models** Yunzhuo Chen, Jordan Vice, Naveed Akhtar et al. | arXiv · eess.IV **2025** | <img width="400" alt="Image Watermarking of Generative Diffusion Models" src="https://arxiv.org/html/2502.10465/extracted/6197882/intro.png"> | [Paper](https://arxiv.org/abs/2502.10465) [PDF](https://arxiv.org/pdf/2502.10465) `2502.10465` |
| **Scalable Fingerprinting of Large Language Models** Anshul Nasery, Jonathan Hayase, Creston Brooks et al. | arXiv · cs.CR **2025** | <img width="400" alt="Scalable Fingerprinting of Large Language Models" src="https://arxiv.org/html/2502.07760/x1.png"> | [Paper](https://arxiv.org/abs/2502.07760) [PDF](https://arxiv.org/pdf/2502.07760) `2502.07760` |
| **FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint** Shuo Shao, Haozhe Zhu, Yiming Li et al. | arXiv · cs.CR **2025** | <img width="400" alt="FIT-Print: Towards False-claim-resistant Model Ownership Verification via Targeted Fingerprint" src="https://arxiv.org/html/2501.15509v5/x1.png"> | [Paper](https://arxiv.org/abs/2501.15509) [PDF](https://arxiv.org/pdf/2501.15509) `2501.15509` |
| **Validation of GPU Computation in Decentralized, Trustless Networks** Eric Boniardi, Stanley Bishop, Alison Haire | arXiv · cs.ET **2025** | <img width="400" alt="Validation of GPU Computation in Decentralized, Trustless Networks" src="https://arxiv.org/html/2501.05374/extracted/6121913/fingerprinting.png"> | [Paper](https://arxiv.org/abs/2501.05374) [PDF](https://arxiv.org/pdf/2501.05374) `2501.05374` |
| **A Game Between the Defender and the Attacker for Trigger-based Black-box Model Watermarking** Chaoyue Huang, Hanzhou Wu | IEEE International Symposium on Digital Forensics and Security 2025 **2025** | <img width="400" alt="A Game Between the Defender and the Attacker for Trigger-based Black-box Model Watermarking" src="https://arxiv.org/html/2501.01194/extracted/6107046/F1.png"> | [Paper](https://arxiv.org/abs/2501.01194) [PDF](https://arxiv.org/pdf/2501.01194) `2501.01194` |
| **Sample Correlation for Fingerprinting Deep Face Recognition** Jiyang Guan, Jian Liang, Yanbo Wang et al. | arXiv · cs.CV **2024** | <img width="400" alt="Sample Correlation for Fingerprinting Deep Face Recognition" src="https://arxiv.org/html/2412.20768/x1.png"> | [Paper](https://arxiv.org/abs/2412.20768) [PDF](https://arxiv.org/pdf/2412.20768) `2412.20768` |
| **Queries, Representation & Detection: The Next 100 Model Fingerprinting Schemes** Augustin Godinot, Erwan Le Merrer, Camilla Penzo et al. | AAAI2025 Main Technical Track **2024** | <img width="400" alt="Queries, Representation &amp; Detection: The Next 100 Model Fingerprinting Schemes" src="https://arxiv.org/html/2412.13021/x1.png"> | [Paper](https://arxiv.org/abs/2412.13021) [PDF](https://arxiv.org/pdf/2412.13021) `2412.13021` |
| **Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers** Vaden Masrani, Mohammad Akbari, David Ming Xuan Yue et al. | AAAI2025 **2024** | <img width="400" alt="Task-Agnostic Language Model Watermarking via High Entropy Passthrough Layers" src="https://arxiv.org/html/2412.12563/x1.png"> | [Paper](https://arxiv.org/abs/2412.12563) [PDF](https://arxiv.org/pdf/2412.12563) `2412.12563` |
| **BlockDoor: Blocking Backdoor Based Watermarks in Deep Neural Networks** Yi Hao Puah, Anh Tu Ngo, Nandish Chattopadhyay et al. | arXiv · cs.CR **2024** | <img width="400" alt="BlockDoor: Blocking Backdoor Based Watermarks in Deep Neural Networks" src="https://arxiv.org/html/2412.12194/x1.png"> | [Paper](https://arxiv.org/abs/2412.12194) [PDF](https://arxiv.org/pdf/2412.12194) `2412.12194` |
| **Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors** Satoru Koda, Ikuya Morikawa | ECML-PKDD2025 **2024** | <img width="400" alt="Bounding-box Watermarking: Defense against Model Extraction Attacks on Object Detectors" src="https://arxiv.org/html/2411.13047/extracted/6569952/figures/keyvisual.png"> | [Paper](https://arxiv.org/abs/2411.13047) [PDF](https://arxiv.org/pdf/2411.13047) `2411.13047` |
| **Watermarking Visual Concepts for Diffusion Models** Liangqi Lei, Keke Gai, Jing Yu et al. | arXiv · cs.CR **2024** | <img width="400" alt="Watermarking Visual Concepts for Diffusion Models" src="https://arxiv.org/html/2411.11688/x1.png"> | [Paper](https://arxiv.org/abs/2411.11688) [PDF](https://arxiv.org/pdf/2411.11688) `2411.11688` |
| **A Novel Access Control and Privacy-Enhancing Approach for Models in Edge Computing** Peihao Li | arXiv · cs.CR **2024** | — | [Paper](https://arxiv.org/abs/2411.03847) [PDF](https://arxiv.org/pdf/2411.03847) `2411.03847` |
| **OML: A Primitive for Reconciling Open Access with Owner Control in AI Model Distribution** Zerui Cheng, Edoardo Contente, Ben Finch et al. | arXiv · cs.AI **2024** | <img width="400" alt="OML: A Primitive for Reconciling Open Access with Owner Control in AI Model Distribution" src="https://arxiv.org/html/2411.03887/x1.png"> | [Paper](https://arxiv.org/abs/2411.03887) [PDF](https://arxiv.org/pdf/2411.03887) `2411.03887` |
| **DeepCore: Simple Fingerprint Construction for Differentiating Homologous and Piracy Models** Haifeng Sun, Lan Zhang, Xiang-Yang Li | ECML-PKDD 2025 **2025** | <img width="400" alt="DeepCore: Simple Fingerprint Construction for Differentiating Homologous and Piracy Models" src="https://arxiv.org/html/2411.00380/x1.png"> | [Paper](https://arxiv.org/abs/2411.00380) [PDF](https://arxiv.org/pdf/2411.00380) `2411.00380` |
| **Harmless Backdoor-based Client-side Watermarking in Federated Learning** Kaijing Luo, Ka-Ho Chow | EuroSP 2025 **2025** | <img width="400" alt="Harmless Backdoor-based Client-side Watermarking in Federated Learning" src="https://arxiv.org/html/2410.21179/extracted/6369992/Kaijing_figs/other_figs/imp_intro_0111_a.png"> | [Paper](https://arxiv.org/abs/2410.21179) [PDF](https://arxiv.org/pdf/2410.21179) `2410.21179` |
| **An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weighting** Dongdong Lin, Yue Li, Benedetta Tondi et al. | Expert Systems with Applications. 331 (2026) 133172 **2026** | <img width="400" alt="An Efficient Watermarking Method for Latent Diffusion Models via Low-Rank Adaptation and Dynamic Loss Weighting" src="https://arxiv.org/html/2410.20202/x1.png"> | [Paper](https://arxiv.org/abs/2410.20202) [PDF](https://arxiv.org/pdf/2410.20202) `2410.20202` |
| **Aligned Datasets Improve Detection of Latent Diffusion-Generated Images** Anirudh Sundara Rajan, Utkarsh Ojha, Jedidiah Schloesser et al. | arXiv · cs.CV **2024** | <img width="400" alt="Aligned Datasets Improve Detection of Latent Diffusion-Generated Images" src="https://arxiv.org/html/2410.11835/extracted/6236065/figs/fake_inv_teaser.png"> | [Paper](https://arxiv.org/abs/2410.11835) [PDF](https://arxiv.org/pdf/2410.11835) `2410.11835` |
| **WAPITI: A Watermark for Finetuned Open-Source LLMs** Lingjie Chen, Ruizhong Qiu, Siyu Yuan et al. | arXiv · cs.CR **2024** | <img width="400" alt="WAPITI: A Watermark for Finetuned Open-Source LLMs" src="https://arxiv.org/html/2410.06467/x1.png"> | [Paper](https://arxiv.org/abs/2410.06467) [PDF](https://arxiv.org/pdf/2410.06467) `2410.06467` |
| **Towards Understanding and Enhancing Security of Proof-of-Training for DNN Model Ownership Verification** Yijia Chang, Hanrui Jiang, Chao Lin et al. | arXiv · cs.CR **2024** | <img width="400" alt="Towards Understanding and Enhancing Security of Proof-of-Training for DNN Model Ownership Verification" src="https://arxiv.org/html/2410.04397/x1.png"> | [Paper](https://arxiv.org/abs/2410.04397) [PDF](https://arxiv.org/pdf/2410.04397) `2410.04397` |
| **Discovering Spoofing Attempts on Language Model Watermarks** Thibaud Gloaguen, Nikola Jovanović, Robin Staab et al. | arXiv · cs.CR **2024** | — | [Paper](https://arxiv.org/abs/2410.02693) [PDF](https://arxiv.org/pdf/2410.02693) `2410.02693` |
| **Trigger-Based Fragile Model Watermarking for Image Transformation Networks** Preston K. Robinette, Dung T. Nguyen, Samuel Sasaki et al. | arXiv · cs.CR **2024** | <img width="400" alt="Trigger-Based Fragile Model Watermarking for Image Transformation Networks" src="https://arxiv.org/html/2409.19442/x1.png"> | [Paper](https://arxiv.org/abs/2409.19442) [PDF](https://arxiv.org/pdf/2409.19442) `2409.19442` |
| **Protecting Copyright of Medical Pre-trained Language Models: Training-Free Backdoor Model Watermarking** Cong Kong, Rui Xu, Weixi Chen et al. | arXiv · cs.LG **2024** | <img width="400" alt="Protecting Copyright of Medical Pre-trained Language Models: Training-Free Backdoor Model Watermarking" src="https://arxiv.org/html/2409.10570/x1.png"> | [Paper](https://arxiv.org/abs/2409.10570) [PDF](https://arxiv.org/pdf/2409.10570) `2409.10570` |
| **Fingerprint Vector: Enabling Scalable and Efficient Model Fingerprint Transfer via Vector Addition** Zhenhua Xu, Qichen Liu, Zhebo Wang et al. | arXiv · cs.CR **2024** | <img width="400" alt="Fingerprint Vector: Enabling Scalable and Efficient Model Fingerprint Transfer via Vector Addition" src="https://arxiv.org/html/2409.08846/figures/pipeline.png"> | [Paper](https://arxiv.org/abs/2409.08846) [PDF](https://arxiv.org/pdf/2409.08846) `2409.08846` |
| **Revisiting Black-Box Model Ownership Verification through Information Theory** Aoting Hu, Yanzhi Chen, Renjie Xie et al. | arXiv · cs.CR **2024** | <img width="400" alt="Revisiting Black-Box Model Ownership Verification through Information Theory" src="https://arxiv.org/html/2409.06130/extracted/5809723/figure/adi_neuron_act3.png"> | [Paper](https://arxiv.org/abs/2409.06130) [PDF](https://arxiv.org/pdf/2409.06130) `2409.06130` |
| **Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography** Jiahao Zhu, Zixuan Chen, Jiali Liu et al. | arXiv · cs.CR **2024** | <img width="400" alt="Plug-and-Hide: Provable and Adjustable Diffusion Generative Steganography" src="https://arxiv.org/html/2409.04878v5/x1.png"> | [Paper](https://arxiv.org/abs/2409.04878) [PDF](https://arxiv.org/pdf/2409.04878) `2409.04878` |
| **WaterMAS: Sharpness-Aware Maximization for Neural Network Watermarking** Carl De Sousa Trias, Mihai Mitrea, Attilio Fiandrotti et al. | arXiv · cs.LG **2024** | <img width="400" alt="WaterMAS: Sharpness-Aware Maximization for Neural Network Watermarking" src="https://arxiv.org/html/2409.03902/x1.png"> | [Paper](https://arxiv.org/abs/2409.03902) [PDF](https://arxiv.org/pdf/2409.03902) `2409.03902` |
| **Agentic Copyright Watermarking against Adversarial Evidence Forgery with Purification-Agnostic Curriculum Proxy Learning** Erjin Bao, Ching-Chun Chang, Hanrui Wang et al. | arXiv · cs.CV **2024** | <img width="400" alt="Agentic Copyright Watermarking against Adversarial Evidence Forgery with Purification-Agnostic Curriculum Proxy Learning" src="https://arxiv.org/html/2409.01541/extracted/6129193/Draft4/Draft4-Pic1.png"> | [Paper](https://arxiv.org/abs/2409.01541) [PDF](https://arxiv.org/pdf/2409.01541) `2409.01541` |
| **Are handcrafted filters helpful for attributing AI-generated images?** Jialiang Li, Haoyue Wang, Sheng Li et al. | arXiv · cs.CV **2024** | — | [Paper](https://arxiv.org/abs/2407.14570) [PDF](https://arxiv.org/pdf/2407.14570) `2407.14570` |
| **Watermarking Recommender Systems** Sixiao Zhang, Cheng Long, Wei Yuan et al. | arXiv · cs.IR **2024** | <img width="400" alt="Watermarking Recommender Systems" src="https://arxiv.org/html/2407.21034/x1.png"> | [Paper](https://arxiv.org/abs/2407.21034) [PDF](https://arxiv.org/pdf/2407.21034) `2407.21034` |
| **Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond** Xuhong Wang, Haoyu Jiang, Yi Yu et al. | arXiv · cs.CR **2024** | <img width="400" alt="Building Intelligence Identification System via Large Language Model Watermarking: A Survey and Beyond" src="https://arxiv.org/html/2407.11100/x1.png"> | [Paper](https://arxiv.org/abs/2407.11100) [PDF](https://arxiv.org/pdf/2407.11100) `2407.11100` |
| **GROOT: Generating Robust Watermark for Diffusion-Model-Based Audio Synthesis** Weizhi Liu, Yue Li, Dongdong Lin et al. | arXiv · cs.CR **2024** | <img width="400" alt="GROOT: Generating Robust Watermark for Diffusion-Model-Based Audio Synthesis" src="https://arxiv.org/html/2407.10471/x1.png"> | [Paper](https://arxiv.org/abs/2407.10471) [PDF](https://arxiv.org/pdf/2407.10471) `2407.10471` |

## Automation

GitHub Actions runs once per day and can also be started manually from the Actions tab. The workflow uses the free arXiv API and does not call a paid AI service.

Inspired by [liutaocode/Video-Generation-arxiv-daily](https://github.com/liutaocode/Video-Generation-arxiv-daily).

Watermarking-arxiv-daily

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README